4576 matches found
MAL-2025-26125 Malicious code in measured-rails (npm)
The package measured-rails was found to contain malicious code...
MAL-2025-33241 Malicious code in signpost-rails (npm)
The package signpost-rails was found to contain malicious code...
Malicious code in graphiql-rails-fork (npm)
The package graphiql-rails-fork was found to contain malicious code...
Malicious code in privacy-enforcer-rails (npm)
The package privacy-enforcer-rails was found to contain malicious code...
Malicious code in signpost-rails (npm)
The package signpost-rails was found to contain malicious code...
Malicious code in rails_fast_attributes (npm)
The package railsfastattributes was found to contain malicious code...
Malicious code in twine-rails (npm)
The package twine-rails was found to contain malicious code...
MAL-2025-29661 Malicious code in privacy-enforcer-rails (npm)
The package privacy-enforcer-rails was found to contain malicious code...
MAL-2025-33595 Malicious code in socket.io-rails (npm)
The package socket.io-rails was found to contain malicious code...
Malicious code in shopify-rails (npm)
The package shopify-rails was found to contain malicious code...
Malicious code in ejson-rails (npm)
The package ejson-rails was found to contain malicious code...
MAL-2025-31564 Malicious code in rails_fast_attributes (npm)
The package railsfastattributes was found to contain malicious code...
MAL-2025-37377 Malicious code in twine-rails (npm)
The package twine-rails was found to contain malicious code...
CVE-2025-55193
Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in...
CVE-2025-55193
Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in...
Rails 安全漏洞
Rails is a set of open source web application frameworks based on the Ruby language from the US-based Rails team. A security vulnerability exists in versions prior to Rails 7.1.5.2, 7.2.2.2, and 8.0.2.1, which stems from the possibility that unescaped IDs may contain ANSI sequences, which could...
Linux Distros Unpatched Vulnerability : CVE-2025-49007
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the...
Thor 操作系统命令注入漏洞
Thor is a Ruby on Rails open source toolkit for building command line interfaces. An operating system command injection vulnerability exists in versions of Thor prior to 1.4.0, which stems from constructing insecure shell commands from library input and could lead to command injection...
Ubuntu: Security Advisory (USN-7646-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...