CVE-2026-54497

CVE-2026-54497 (ViewComponent, Ruby on Rails) : Affected through ViewComponent::Base from 4.0.0 to 4.11.x where render_in can retain render-scoped objects across invocations. Reusing the same component instance (or collection/spacer) across requests/threads can cause stale request context, helper...

CVE-2026-54497

creationtimestamp| type| source ---|---|--- 2026-07-16 00:35:13+00:00| published-proof-of-concept| https://github.com/ViewComponent/viewcomponent/security/advisories/GHSA-9h85-g7w3-rh49 2026-07-18 00:29:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquz4ycoui23...