GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, jruby, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator, kube-logging-operator, logstash...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, jruby, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator, kube-logging-operator, logstash...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, jruby, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator, kube-logging-operator, logstash...

CVE-2026-47240 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby3.3-rails, jruby, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator, kube-logging-operator, logstash...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: truffleruby, logstash-fips, gitlab-rails-ce, ruby3.4-rails, kube-logging-operator, gitlab-rails-ce-fips, jruby, ruby3.3-rails, logstash, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator...

CVE-2026-47242 vulnerabilities

Vulnerabilities for packages: truffleruby, logstash-fips, gitlab-rails-ce, ruby3.4-rails, kube-logging-operator, gitlab-rails-ce-fips, jruby, ruby3.3-rails, logstash, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator...

GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: truffleruby, logstash-fips, gitlab-rails-ce, ruby3.4-rails, kube-logging-operator, gitlab-rails-ce-fips, jruby, ruby3.3-rails, logstash, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: truffleruby, logstash-fips, gitlab-rails-ce, ruby3.4-rails, kube-logging-operator, gitlab-rails-ce-fips, jruby, ruby3.3-rails, logstash, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: truffleruby, logstash-fips, gitlab-rails-ce, ruby3.4-rails, kube-logging-operator, gitlab-rails-ce-fips, jruby, ruby3.3-rails, logstash, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator...

CVE-2026-47240 vulnerabilities

Vulnerabilities for packages: truffleruby, logstash-fips, gitlab-rails-ce, ruby3.4-rails, kube-logging-operator, gitlab-rails-ce-fips, jruby, ruby3.3-rails, logstash, ruby3.2-rails, ruby4.0-rails, kube-fluentd-operator...

GHSA-2VQW-3MP8-CGMX vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, logstash, gitlab-cng...

CVE-2026-47736 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, logstash, gitlab-cng...

CVE-2026-47737 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, logstash, gitlab-cng...

GHSA-QPGP-93VX-G8V8 vulnerabilities

Vulnerabilities for packages: logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, logstash, gitlab-cng...

Security Bulletin: IBM Security Network Intrusion Prevention System can be affected by vulnerabilities in Ruby on Rails (CVE-2012-2660, CVE-2012-2694, CVE-2013-0156, CVE-2012-6496, CVE-2012-3424, and CVE-2012-2695)

Question Is the Network IPS system affected by Ruby on Rails vulnerabilities? "Product":"code":"SS9SBT","label":"Proventia Network Intrusion Prevention System","Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Component":"General...

CVE-2026-44511

Katalyst Koi is a framework for building Rails admin functionality. Prior to 4.20.0 and 5.6.0, admin session cookies were not invalidated when an admin user logged out. An attacker with access to a valid admin session cookie could continue to access admin functionality after logout, until the...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Tuzitio Camaleon_Cms

HTB Facts — Full Writeup Difficulty: Medium OS: Lin...

Linux Distros Unpatched Vulnerability : CVE-2026-44837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - viewcomponent is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, the system test entrypoint...

Linux Distros Unpatched Vulnerability : CVE-2026-44836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - viewcomponent is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, the preview route derives ...

CVE-2026-44837

viewcomponent is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 3.0.0 to 4.9.0, the system test entrypoint canonicalizes a user-controlled file path with File.realpath, then checks whether the resolved path starts with the temp directory path...