CVE-2026-40295

CVE-2026-40295 affects Devise (Rails/Warden) where FailureApp#redirect_url returns request.referrer for non-GET timeouts, enabling open redirects to attacker-controlled URLs. This occurs in Devise 5.0.3 and earlier and can cause phishing or malware delivery by redirecting expired-session users to...

CVE-2026-40295

Devise is an authentication solution for Rails based on Warden. In versions 5.0.3 and below, when the Timeoutable module is enabled in Devise, the FailureAppredirecturl method returns request.referrer — the HTTP Referer header, which is attacker-controllable — without validation for any non-GET...

CVE-2026-40295: URL Redirection to Untrusted Site

Devise is an authentication solution for Rails based on Warden. In versions 5.0.3 and below, when the Timeoutable module is enabled in Devise, the FailureAppredirecturl method returns request.referrer — the HTTP Referer header, which is attacker-controllable — without validation for any non-GET...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: rubygem-rails (UTSA-2026-016651)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016651 advisory. A deserialization of untrusted data vulnernerability exists in rails 5.2.4.3, rails 6.0.3.1 that can allow an attacker to unmarshal user-provided objects in...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: rubygem-rails (UTSA-2026-016644)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016644 advisory. A client side enforcement of server side security vulnerability exists in rails 5.2.4.2 and rails 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length o...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, scorecard, kaniko-fips, grype-fips, zot, teleport, gitlab-runner, grafana, gitaly-fips, gitea, syft, grype, nuclei, src-fingerprint, packer, gitlab-runner-fips, jfrog-cli, argocd-image-updater, kubescape, grafana-alloy-fips, steampipe,...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, scorecard, kaniko-fips, grype-fips, zot, teleport, gitlab-runner, grafana, gitaly-fips, gitea, syft, grype, nuclei, src-fingerprint, packer, gitlab-runner-fips, jfrog-cli, argocd-image-updater, kubescape, grafana-alloy-fips, steampipe,...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, scorecard, kaniko-fips, grype-fips, zot, teleport, gitlab-runner, grafana, gitaly-fips, gitea, syft, grype, nuclei, src-fingerprint, packer, gitlab-runner-fips, jfrog-cli, argocd-image-updater, kubescape, grafana-alloy-fips, steampipe,...

CVE-2026-44973 vulnerabilities

Vulnerabilities for packages: telegraf, chainloop-cli, kyverno, scorecard, packer-fips, argo-cd-fips, amazon-ssm-agent, rclone, terragrunt-fips, teleport, grafana, chainloop-cli-fips, cerbos, terragrunt, external-secrets-operator, argo-cd, grafana-fips, syft, skaffold-fips, seaweedfs-rocksdb,...

GHSA-QW64-3X98-G7Q2 vulnerabilities

Vulnerabilities for packages: telegraf, chainloop-cli, kyverno, scorecard, packer-fips, argo-cd-fips, amazon-ssm-agent, rclone, terragrunt-fips, teleport, grafana, chainloop-cli-fips, cerbos, terragrunt, external-secrets-operator, argo-cd, grafana-fips, syft, skaffold-fips, seaweedfs-rocksdb,...

CVE-2026-44511

Katalyst Koi is a framework for building Rails admin functionality. Prior to 4.20.0 and 5.6.0, admin session cookies were not invalidated when an admin user logged out. An attacker with access to a valid admin session cookie could continue to access admin functionality after logout, until the...

Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares

Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.2 Vulnerability Details CVEID:CVE-2026-33168 DESCRIPTION: Action View provides conventions and helpers for building web pages with the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a...

Malicious Package

Overview knot-rails-assets-pipeline is a malicious package. This package is part of a malicious cluster of Ruby gems published by the threat actor knot-theory. Designed to impersonate legitimate utilities, it executes a payload upon installation that harvests environment variables, SSH keys, AWS...

WS-2018-0229

rails-session-decoder is missing verification of the Message Authentication Code appended to the cookies. This may lead to decryption of cipher text thus exposing encrypted information...

CVE-2026-44511: Insufficient Session Expiration

Katalyst Koi is a framework for building Rails admin functionality. Prior to 4.20.0 and 5.6.0, admin session cookies were not invalidated when an admin user logged out. An attacker with access to a valid admin session cookie could continue to access admin functionality after logout, until the...

angular-cjk-word-break (>=0.1.0, <=0.1.1), angular-pusher-bridge (>=0.1.1, <=0.1.4) +2 more potentially affected by unknown CVE via angular (>=0.0.1, <=1.2.0)

angular NPM version =0.0.1, =0.1.0, =0.1.1, =0.0.1, =0.0.25 Source cves: unknown CVE Source advisory: MEND:WS-2017-0125...

Malicious code in knot-rails-assets-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters. The packages in this cluster steal...

MAL-2026-3634 Malicious code in knot-rails-assets-pipeline (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security a4e4f74e90479d472a307d311d48214827e21cf93ecf9b0b62ff2cb72adb2c9e This package is a malicious packages part of the Go BufferZoneCorp and RubyGems knot-theory clusters. The packages in this cluster steal...

CVE-2026-42205

Avo is a framework to create admin panels for Ruby on Rails apps. Prior to version 3.31.2, a broken access control vulnerability was identified in the ActionsController of the Avo framework. Due to insecure action lookup logic, an authenticated user can execute any Action class descendants of...

[SECURITY] [DLA 4578-1] rails security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4578-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 11, 2026 https://wiki.debian.org/LTS -...