Rails: Active Support: Active Support: Denial of Service via large scientific notation strings

A flaw was found in Active Support, a toolkit of support libraries for Ruby on Rails. A remote attacker can exploit this vulnerability by providing specially crafted strings containing scientific notation e.g., "1e10000" to number helpers. This input causes the BigDecimal component to expand into...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rubygem-rack (UTSA-2026-016518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016518 advisory. Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large response. Responding with such...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: crossplane, chainloop-cli-fips, xeol, src-fingerprint-fips, terragrunt-fips, gitea, external-secrets-operator, grype-db, act, snyk-cli, cerbos, flux-image-automation-controller-fips, jfrog-cli, amazon-ssm-agent, argo-workflows-fips, kubevela-fips, mapotf,...

CVE-2026-42256 vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

CVE-2026-42257 vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, kube-fluentd-operator, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, kube-fluentd-operator, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

CVE-2026-42246 vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, kube-fluentd-operator, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

GHSA-75XQ-5H9V-W6PX vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, kube-fluentd-operator, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

GHSA-VCGP-9326-PQCP vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, kube-fluentd-operator, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

CVE-2026-42258 vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, kube-fluentd-operator, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

GHSA-87PF-FPWV-P7M7 vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, kube-fluentd-operator, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

CVE-2026-42245 vulnerabilities

Vulnerabilities for packages: ruby4.0-net-imap, ruby3.4-rails, kube-fluentd-operator, jruby, ruby4.0-rails, ruby3.4-net-imap, ruby3.3-rails, ruby3.3-net-imap, kube-logging-operator, ruby3.2-rails, ruby3.2-net-imap, logstash...

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, ruby3.3-net-imap, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-net-imap, ruby3.2-net-imap, ruby4.0-net-imap, logstash, ruby4.0-rails, kube-fluentd-operator, truffleruby, ruby3.2-rails, jruby, ruby3.4-rails...

GHSA-HM49-WCQC-G2XG vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, ruby3.3-net-imap, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-net-imap, ruby3.2-net-imap, ruby4.0-net-imap, logstash, ruby4.0-rails, kube-fluentd-operator, truffleruby, ruby3.2-rails, jruby, ruby3.4-rails...

CVE-2026-42245 vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, ruby3.3-net-imap, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-net-imap, ruby3.2-net-imap, ruby4.0-net-imap, logstash, ruby4.0-rails, kube-fluentd-operator, truffleruby, ruby3.2-rails, jruby, ruby3.4-rails...

CVE-2026-42256 vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, ruby3.3-net-imap, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-net-imap, ruby3.2-net-imap, ruby4.0-net-imap, logstash, ruby4.0-rails, truffleruby, ruby3.2-rails, jruby, ruby3.4-rails...

GHSA-75XQ-5H9V-W6PX vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, ruby3.3-net-imap, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-net-imap, ruby3.2-net-imap, ruby4.0-net-imap, logstash, ruby4.0-rails, kube-fluentd-operator, truffleruby, ruby3.2-rails, jruby, ruby3.4-rails...

CVE-2026-42258 vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, ruby3.3-net-imap, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-net-imap, ruby3.2-net-imap, ruby4.0-net-imap, logstash, ruby4.0-rails, kube-fluentd-operator, truffleruby, ruby3.2-rails, jruby, ruby3.4-rails...

GHSA-87PF-FPWV-P7M7 vulnerabilities

Vulnerabilities for packages: logstash-fips, kube-logging-operator, ruby3.3-net-imap, gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-net-imap, ruby3.2-net-imap, ruby4.0-net-imap, logstash, ruby4.0-rails, truffleruby, ruby3.2-rails, jruby, ruby3.4-rails...