GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.3-rails, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.3-rails, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-8678-W3JW-XFC2 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.3-rails, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.3-rails, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

CVE-2026-54906 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.2-rails...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.3-rails, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-5PRR-V3J2-97MH vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.3-rails, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.2-rails...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.2-rails...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.3-rails, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.3-rails, logstash, ruby3.4-rails, logstash-fips, kube-logging-operator...

GHSA-6WX8-W4F5-WWCR vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.2-rails...

GHSA-H8W8-99G7-QMVJ vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.2-rails...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.4-rails, kube-fluentd-operator, ruby3.2-rails...

GHSA-84XV-JFRM-H4GM vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2024-1485 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: ruby3.3-faraday, gitlab-rails-ce-fips, logstash, gitlab-rails-ce, kube-fluentd-operator, logstash-fips, gitlab-cng...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: ruby3.3-faraday, gitlab-rails-ce-fips, logstash, gitlab-rails-ce, kube-fluentd-operator, logstash-fips, gitlab-cng...

Ruby on Rails <5.0.1 - Remote Code Execution

Ruby on Rails before version 5.0.1 is susceptible to remote code execution because it passes user parameters as local variables into partials. id: CVE-2020-8163 info: name: Ruby on Rails 5.0.1 - Remote Code Execution author: timkoopmans severity: high description: Ruby on Rails before version 5.0...

Ruby on Rails Web Console - Remote Code Execution

Ruby on Rails Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headers in determining a client's IP address, which allows remote attackers to bypass the whitelistedips protection mechanism via a crafted request to request.rb...