CVE-2026-126080

The Active Support library (used by Rails and other Ruby projects) contains a vulnerability in ActiveSupport::Inflector#safe_constantize (and String#safe_constantize ). Prior to versions 8.1.4.1 and 8.0.5.2 , the library fails to escape requested constant names when building regular expressions a...

EUVD-2026-122930

Active Support is a collection of utility classes and standard library extensions used by Rails and other Ruby projects. Prior to 8.1.4.1 and 8.0.5.2, when constant lookup raises LoadError, ActiveSupport::Inflectorsafeconstantize and Stringsafeconstantize builds a regular expression from the...

MAL-2024-6376 Malicious code in action-cable_subscription_adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in action-cable_subscription_adapter (RubyGems)

--- -= Per source details. Do not edit below this line.=-...