4570 matches found
Ruby on Rails - Open Redirect via Host Header Injection
Ruby on Rails action pack before 6.1.2.1, 6.0.3.5 contains an open redirect caused by special crafted Host headers in combination with allowed host formats, letting attackers redirect users to malicious websites, exploit requires attacker to control Host headers. id: CVE-2021-22881 info: name: Ru...
Rails File Content Disclosure
Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...
phishing-frenzy
Phishing Frenzy Ruby on Rails Phishing Framework Documentation & Info Relevant up to date documentation can be found on the official Phishing Frenzy website located below Phishing Frenzy Website Please submit any tickets or issues to the github issues page Phishing Frenzy Tickets To contact us...
Astra Linux – Vulnerability in Ruby-Rack
A denial-of-service vulnerability in the multipart parsing component of Rack was fixed in versions 2.0.9.2, 2.1.4.2, 2.2.4.1, and 3.0.0.1. This vulnerability could allow attackers to craft input that causes the RFC2183 multipart boundary parsing in Rack to take an unexpectedly long time,...
Astra Linux – Vulnerability in Rails
Action Pack is a framework for handling and responding to web requests. Under certain circumstances, response bodies may not be closed properly. If a response does not notify the system of a close operation, ActionDispatch::Executor will not know to reset the thread local state for the next...
Bad secure rails app
Dieses Repository hat keine README-Datei...
PT-2026-77143
Name of the Vulnerable Software and Affected Versions Mastodon versions prior to 4.4.19 Mastodon versions 4.5.0 through 4.5.11 Description When LDAP authentication is configured with LDAP TLS NO VERIFY=true, the file app/models/concerns/user/ldap authenticable.rb mutates...
CVE-2026-69185 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...
GHSA-2M8V-J782-FHVR vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...
CVE-2026-73648 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, pghero, ruby3.3-rails, pghero-fips, ruby3.4-rails, ruby4.0-rails...
CVE-2026-73648 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, ruby3.2-rails...
CVE-2026-73648
A flaw was found in rails-html-sanitizer, a component responsible for sanitizing HTML fragments in Rails applications. This vulnerability allows a remote attacker to perform Cross-Site Scripting XSS by exploiting improper sanitization of SVG Scalable Vector Graphics reference elements. The...
GO-2024-2576 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...
GO-2026-5024 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, trino, etcd-fips, kubeflow-katib, upwind-agent, k3s, kube-conformance, etcd...
GO-2025-4116 vulnerabilities
Vulnerabilities for packages: rke2-runtime-fips, cert-manager-fips, terraform, gitlab-rails-ce-fips, gitlab-rails-ce, falco-no-driver, etcd-fips, backup-restore-operator, k3s, consul-k8s, vault, etcd...
GO-2026-5094 vulnerabilities
Vulnerabilities for packages: portieris, gitlab-rails-ce-fips, portieris-fips, gitlab-rails-ce, kots, gitness, argocd-image-updater, envoy-gateway-fips, envoy-gateway, argocd-image-updater-fips, zot...
GO-2026-5185 vulnerabilities
Vulnerabilities for packages: portieris, gitlab-rails-ce-fips, portieris-fips, gitlab-rails-ce, kots, gitness, argocd-image-updater, envoy-gateway-fips, envoy-gateway, argocd-image-updater-fips, zot...
GO-2026-5693 vulnerabilities
Vulnerabilities for packages: terragrunt, grafana, gitlab-rails-ce-fips, argo-cd-fips, external-secrets-operator, gitlab-rails-ce, gitaly, nemo, grafana-fips, flux, external-secrets-operator-fips, guac, teleport, terragrunt-fips, upwind-agent, flux-fips, argo-cd...
Linux Distros Unpatched Vulnerability : CVE-2026-73648
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG...