4 known security vulnerabilities

  • highGHSA-hjg4-8q5f-x6fm(CVE-2021-22885)

    Action Pack contains Information Disclosure / Unintended Method Execution vulnerability

Show 3 more vulnerabilities
2 moderate1 low
  • moderateGHSA-4g8v-vg43-wpgf(CVE-2023-28362)

    Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to

  • moderateGHSA-x76w-6vjr-8xgj(BIT-rails-2024-41128, CVE-2024-41128)

    Possible ReDoS vulnerability in query parameter filtering in Action Dispatch

  • lowGHSA-p84v-45xj-wwqj(CVE-2023-22792)

    ReDoS based DoS vulnerability in Action Dispatch

Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.

Required Ruby Version

>= 1.8.7

Authors

David Heinemeier Hansson

Versions

  1. 8.1.4

    1. source

      1. 8.1.4 source September 24, 2026 (258 KB)
  2. 8.1.3.1

    1. source

      1. 8.1.3.1 source July 29, 2026 (256 KB)
  3. 8.1.3

    1. source

      1. 8.1.3 source March 24, 2026 (256 KB)
  4. 8.1.2.1

    1. source

      1. 8.1.2.1 source March 23, 2026 (256 KB)
  5. 8.1.2

    1. source

      1. 8.1.2 source January 08, 2026 (256 KB)
  6. 3.2.22.5

    1. source

      1. 3.2.22.5 source September 14, 2016 (285 KB)
Show all versions (525 total)

Requirements

none

SHA 256 checksum

← Previous version Next version →