-CVE-2012-2661-ActiveRecord-SQL-injection-

-CVE-2012-2661-ActiveRecord-SQL-injection- Write upMalay...

cve-2022-32224-rails

CVE-2022-3222 ActiveRecord Serialization Behavior Verification https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017 https://api.rubyonrails.org/classes/ActiveRecord/AttributeMethods/Serialization/ClassMethods.html...

Malicious code in activerecord-rescue_from_duplicate (npm)

The package activerecord-rescuefromduplicate was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in activerecord-pedantmysql2-adapter (npm)

The package activerecord-pedantmysql2-adapter was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in activerecord-databasevalidations (npm)

The package activerecord-databasevalidations was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in activerecord-firewall (npm)

The package activerecord-firewall was found to contain malicious code. --- Credit: OpenSSF source...

GHSA-PMWX-RM49-XV39 ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal

Summary Active Record Tenanted's override of Active Storage's DiskServicepathfor does not validate that the resolved filesystem path remains within the storage root directory. If a blob key containing path traversal sequences e.g. ../ is used, it could allow reading, writing, or deleting arbitrar...

Malicious code in activerecord-strict_validations (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-globalize (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-suppress-range_error (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-serialize-coders (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-msgpack-serializer (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-database-validations (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-pluck-in_batches (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-rescue-from_duplicate (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-json_validator (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-safe-initialize (RubyGems)

--- Credit: OpenSSF source...

Malicious code in activerecord-forbid-implicit_connection_checkout (RubyGems)

--- Credit: OpenSSF source...

pycroxe (0.4.0), pynbi (0.1.0) +1 more potentially affected by CVE-2026-44172 via mariadb (2.0.0rc2)

mariadb PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on mariadb and may be impacted: - pycroxe 0.4.0 - pynbi 0.1.0 - rhosocial-activerecord-mariadb =1.0.0.dev1, =1.0.0.dev2 Source cves: CVE-2026-44172 Source advisory:...

RHCOS 6 : ruby193-rubygem-activerecord (RHSA-2013:0699)

The remote Red Hat Enterprise Linux CoreOS 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0699 advisory. - rubygem-activerecord: attributedos Symbol DoS vulnerability CVE-2013-1854 Note that Nessus has not tested for this issue but has instead...