4576 matches found
CVE-2026-33209
Avo is a framework to create admin panels for Ruby on Rails apps. Prior to version 3.30.3, a reflected cross-site scripting XSS vulnerability exists in the returnto query parameter used in the avo interface. An attacker can craft a malicious URL that injects arbitrary JavaScript, which is execute...
Rails 安全漏洞
Rails is an open-source web application framework based on the Ruby language, developed by the Rails team in the United States. Vulnerabilities exist in versions of Rails Active Storage prior to 8.1.2.1, 8.0.4.1, and 7.2.3.1. These vulnerabilities stem from the lack of restrictions on the number ...
Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests
Impact Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with thousands of small ranges causes disproportionate CPU usage compared to a normal request for the same file, possibly resulting in a DoS vulnerability. Releases The fixed...
GHSA-P9FM-F462-GGRG Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests
Impact Active Storage's proxy controller does not limit the number of byte ranges in an HTTP Range header. A request with thousands of small ranges causes disproportionate CPU usage compared to a normal request for the same file, possibly resulting in a DoS vulnerability. Releases The fixed...
CVE-2026-33202 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...
GHSA-73F9-JHHH-HR5M vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...
GHSA-V55J-83PF-R9CQ vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...
CVE-2026-33176 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, ruby3.2-rails, ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator...
CVE-2026-33169 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, ruby3.2-rails, ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator...
GHSA-2J26-FRM8-CMJ9 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, ruby3.2-rails, ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator...
CVE-2026-33174 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...
CVE-2026-33168 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...
CVE-2026-33173 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...
CVE-2026-33170 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, ruby3.2-rails, ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator...
GHSA-89VF-4333-QX8V vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, ruby3.2-rails, ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator...
GHSA-CG4J-Q9V8-6V38 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, ruby3.2-rails, ruby3.4-rails, gitlab-rails-ce-fips, gitlab-rails-ce, kube-fluentd-operator...
GHSA-R46P-8F7G-VVVG vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...
GHSA-QCFX-2MFW-W4CG vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce...
