4 known security vulnerabilities

  • highGHSA-ffpv-c4hm-3x6v(CVE-2016-0751)

    actionpack is vulnerable to denial of service via a crafted HTTP Accept header

Show 3 more vulnerabilities
2 high1 moderate
  • highGHSA-hjg4-8q5f-x6fm(CVE-2021-22885)

    Action Pack contains Information Disclosure / Unintended Method Execution vulnerability

  • highGHSA-xrr4-p6fq-hjg7(CVE-2016-0752)

    Directory traversal vulnerability in Action View in Ruby on Rails

  • moderateGHSA-4g8v-vg43-wpgf(CVE-2023-28362)

    Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling easy unit/integration testing that doesn't require a browser.

Required Ruby Version

None

Authors

David Heinemeier Hansson

Versions

  1. 8.1.4

    1. source

      1. 8.1.4 source September 24, 2026 (258 KB)
  2. 8.1.3.1

    1. source

      1. 8.1.3.1 source July 29, 2026 (256 KB)
  3. 8.1.3

    1. source

      1. 8.1.3 source March 24, 2026 (256 KB)
  4. 8.1.2.1

    1. source

      1. 8.1.2.1 source March 23, 2026 (256 KB)
  5. 8.1.2

    1. source

      1. 8.1.2 source January 08, 2026 (256 KB)
  6. 2.3.18

    1. source

      1. 2.3.18 source March 18, 2013 (732 KB)
Show all versions (525 total)

SHA 256 checksum

← Previous version Next version →