CVE-2026-83619 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

GHSA-27P8-2357-5QQV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2026-83608 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2026-83614 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

GHSA-8344-3JMQ-59R6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

GHSA-93R5-FHX6-VMG9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2026-83611 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2026-83613 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2026-83615 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2026-83616 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

GHSA-965W-775F-MR7G vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

GHSA-C7Q8-3CH8-VQPV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

GHSA-X4FP-J954-R2F4 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

CVE-2026-85062 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, vitess, arangodb...

GHSA-2WM5-Q62R-HMRV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, vitess, arangodb...

Rails File Content Disclosure

Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2024-46987

CVE-2024-46987 – Camaleon CMS 认证路径遍历/任意文件读取 CVE-2024-46987 是 Camaleon CMS （一个基于 Ruby on Rails 的内容管理系统）中的一个 经过认证的路径遍历漏洞 （CWE-22）。它允许已登录用户（即使权限较低）通过 MediaControllerdownloadprivatefile 操作读取服务器上的任意文件。 发布时间 ：2024 年 9 月 18 日 CVSS v3.1 ：7.7 高 向量：CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CWE...

rabl-old

RABL RABL（Ruby API Builder Language）是一个用于生成 JSON、XML、MessagePack、PList 和 BSON 的 Rails 和 Padrino Ruby 模板系统。在使用 ActiveRecord 的 'tojson' 方法时，我发现自己渴望一个更具表现力和更强大的 API 生成方案。当 JSON 表示复杂或与数据库中定义的确切模式不匹配时，这一点尤为突出。 特别是，我希望能够轻松实现： 基于对象中的数据组合创建任意节点 向方法传递参数并将结果存储为子节点 渲染局部模板并进行继承，以减少代码重复 重命名或别名化属性，以改变模型中的名称...

Ruby on Rails - Open Redirect via Host Header Injection

Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...