CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. https://vulners.com/cve/CVE-2016-2098 Usage git clone...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 Use git clone...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Resources https://vulners.com/cve/CVE-2016-2098 Usage To use this...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Class Input Validation Error Credits Tobias Kraze from makandra an...

name_reverser

== Welcome to Rails Rails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Control pattern. This pattern splits the view also called the presentation into "dumb" templates that are primarily responsible for...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...

EUVD-2026-123002

Action Pack: Possible DoS vulnerability in Action Controller Live streaming...

Action Pack: Possible DoS vulnerability in Action Controller Live streaming

Impact ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is full, the push blocks, and Bufferabort, which runs when the client disconnects or a write times ou...

GHSA-RWVH-FW6R-PWVP Action Pack: Possible DoS vulnerability in Action Controller Live streaming

Impact ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is full, the push blocks, and Bufferabort, which runs when the client disconnects or a write times ou...

Action Pack: Possible sensitive session information leak in Active Storage proxy mode

Impact When ActionDispatch::Cookies reads a signed or encrypted cookie that was written under a rotated secret config.actiondispatch.cookiesrotations or in the format that a :hybrid cookie serializer migrates from, it writes the cookie back to the response in the current format, and that write...

EUVD-2026-122926

Action Pack: Possible sensitive session information leak in Active Storage proxy mode...

GHSA-X6MJ-8JX9-QHQV Action Pack: Possible sensitive session information leak in Active Storage proxy mode

Impact When ActionDispatch::Cookies reads a signed or encrypted cookie that was written under a rotated secret config.actiondispatch.cookiesrotations or in the format that a :hybrid cookie serializer migrates from, it writes the cookie back to the response in the current format, and that write...

GHSA-WM3X-V3QW-4JH3 Action Pack: Possible Strong Parameters Bypass in Parameters#each_key

Impact ActionController::Parameterseachkey delegates to the internal ActiveSupport::HashWithIndifferentAccess that holds the request parameters, so when called with a block it returns that hash instead of the Parameters instance. The hash does not respond to permitted?, so Active Model mass...

Action Pack: Possible Strong Parameters Bypass in Parameters#each_key

Impact ActionController::Parameterseachkey delegates to the internal ActiveSupport::HashWithIndifferentAccess that holds the request parameters, so when called with a block it returns that hash instead of the Parameters instance. The hash does not respond to permitted?, so Active Model mass...

EUVD-2026-122932

Action Pack: Possible Strong Parameters Bypass in Parameterseachkey...

UBUNTU-CVE-2026-126067

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, Action Pack session stores other than ActionDispatch::Session::CookieStore CacheStore, MemCacheStore, and third-party stores built on AbstractStore, AbstractSecureStore or the session mixins writ...

UBUNTU-CVE-2026-126081

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Parameterseachkey delegates to the internal ActiveSupport::HashWithIndifferentAccess that holds the request parameters, so when called with a block it returns that hash instead ...

UBUNTU-CVE-2026-126077

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, When ActionDispatch::Cookies reads a signed or encrypted cookie that was written under a rotated secret config.actiondispatch.cookiesrotations or in the format that a :hybrid cookie serializer...

CVE-2026-126073

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, Action Pack negotiates the format of a rendered response from the Accept, X-Requested-With and, for XHR requests without Accept, Content-Type request headers, but...

UBUNTU-CVE-2026-126072

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Live::Bufferclose pushes its end-of-stream marker onto the response's bounded queue while it holds the buffer's monitor. When the client has stopped reading and the queue is ful...