CVE-2026-61666 vulnerabilities

Vulnerabilities for packages: pghero-fips, pghero, ruby4.0-rails...

GHSA-2X63-GW47-W4MM vulnerabilities

Vulnerabilities for packages: pghero-fips, pghero, ruby4.0-rails...

GHSA-8WHX-365G-H9VV vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...

GHSA-CJ75-F6XR-R4G7 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...

GHSA-9WJQ-CP2P-HRGF vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...

GHSA-5QHF-9PHG-95M2 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...

GHSA-9WJQ-CP2P-HRGF vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-CJ75-F6XR-R4G7 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-8WHX-365G-H9VV vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-5QHF-9PHG-95M2 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, ruby4.0-rails, ruby3.3-rails...

GHSA-CJ75-F6XR-R4G7 Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations

Summary There is a possible cross-site scripting vulnerability in rails-html-sanitizer when the sanitizer is configured to allow an SVG reference element such as . See related GHSA-9wjq-cp2p-hrgf in Loofah, whose SVG local-reference logic rails-html-sanitizer mirrors. - Versions affected: = 1.0.3...

GHSA-W8WR-V893-VJVP vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, pulumi, gitlab-rails-ce, kibana, actions-runner, lerna, prism, saf, wazuh-dashboard-fips, opensearch-dashboards-fips, gitlab-rails-ce-fips, homepage, graalvm, npm, code-server, kubeflow-centraldashboard, sqlpad...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, pulumi, gitlab-rails-ce, kibana, actions-runner, lerna, prism, saf, wazuh-dashboard-fips, opensearch-dashboards-fips, gitlab-rails-ce-fips, homepage, graalvm, npm, code-server, kubeflow-centraldashboard, sqlpad...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, pulumi, gitlab-rails-ce, kibana, actions-runner, lerna, prism, saf, wazuh-dashboard-fips, opensearch-dashboards-fips, gitlab-rails-ce-fips, sqlpad, graalvm, npm, code-server, kubeflow-centraldashboard...

GHSA-23HP-3JRH-7FPW vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, pulumi, gitlab-rails-ce, kibana, actions-runner, lerna, prism, saf, wazuh-dashboard-fips, opensearch-dashboards-fips, gitlab-rails-ce-fips, homepage, graalvm, npm, code-server, kubeflow-centraldashboard, sqlpad...

CVE-2026-54466 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, gitlab-rails-ce...

GHSA-MP7J-QC5W-4988 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, gitlab-rails-ce...

CVE-2026-54490 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, gitlab-rails-ce...

GHSA-XV26-6W52-CPH6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, arangodb, gitlab-rails-ce...

Rails File Content Disclosure

Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...