4578 matches found
GHSA-9WJQ-CP2P-HRGF vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, pghero-fips, ruby3.3-rails, ruby4.0-rails, pghero...
GHSA-5QHF-9PHG-95M2 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, pghero-fips, ruby3.3-rails, ruby4.0-rails, pghero...
GHSA-8WHX-365G-H9VV vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, pghero-fips, ruby3.3-rails, ruby4.0-rails, pghero...
GHSA-CJ75-F6XR-R4G7 Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations
Summary There is a possible cross-site scripting vulnerability in rails-html-sanitizer when the sanitizer is configured to allow an SVG reference element such as . See related GHSA-9wjq-cp2p-hrgf in Loofah, whose SVG local-reference logic rails-html-sanitizer mirrors. - Versions affected: = 1.0.3...
Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations
Summary There is a possible cross-site scripting vulnerability in rails-html-sanitizer when the sanitizer is configured to allow an SVG reference element such as . See related GHSA-9wjq-cp2p-hrgf in Loofah, whose SVG local-reference logic rails-html-sanitizer mirrors. - Versions affected: = 1.0.3...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: code-server, lerna, homepage, npm, kibana, pulumi, opensearch-dashboards, sqlpad, wazuh-dashboard-fips, saf, kubeflow-centraldashboard, opensearch-dashboards-fips, wazuh-dashboard, graalvm, prism, gitlab-rails-ce-fips, actions-runner, gitlab-rails-ce...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: code-server, lerna, homepage, npm, kibana, pulumi, opensearch-dashboards, sqlpad, wazuh-dashboard-fips, saf, kubeflow-centraldashboard, opensearch-dashboards-fips, wazuh-dashboard, graalvm, prism, gitlab-rails-ce-fips, actions-runner, gitlab-rails-ce...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: code-server, lerna, homepage, npm, kibana, pulumi, opensearch-dashboards, sqlpad, wazuh-dashboard-fips, saf, kubeflow-centraldashboard, opensearch-dashboards-fips, wazuh-dashboard, graalvm, prism, gitlab-rails-ce-fips, actions-runner, gitlab-rails-ce...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: code-server, lerna, npm, kibana, pulumi, opensearch-dashboards, sqlpad, wazuh-dashboard-fips, saf, kubeflow-centraldashboard, opensearch-dashboards-fips, wazuh-dashboard, graalvm, prism, gitlab-rails-ce-fips, actions-runner, gitlab-rails-ce...
CVE-2026-54466 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-MP7J-QC5W-4988 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-54490 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce...
GHSA-XV26-6W52-CPH6 vulnerabilities
Vulnerabilities for packages: arangodb, gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-55518
Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0.0.beta.51, Avo's association attach workflow checks attach? in the UI and GET /resources/:resource/:id/:related/new path, but the actual write endpoint, POST /resources/:resource/:id/:related, does not run t...
CVE-2026-55518 Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation
Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0.0.beta.51, Avo's association attach workflow checks attach? in the UI and GET /resources/:resource/:id/:related/new path, but the actual write endpoint, POST /resources/:resource/:id/:related, does not run t...
EUVD-2026-45333
viewcomponent is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 until 4.12.0, ViewComponent::Basearoundrender can return HTML-unsafe strings that bypass the escaping behavior applied to normal call return values. This creates an XSS risk...
CVE-2026-13320 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce...
GHSA-PGGX-2V9R-J6GM vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-rails-ce...