7 known security vulnerabilities
- highGHSA-7wjx-3g7j-8584(CVE-2021-22904)
Possible DoS Vulnerability in Action Controller Token Authentication
Show 6 more vulnerabilitiesShow fewer vulnerabilities1 high3 moderate2 low
- highGHSA-hjg4-8q5f-x6fm(CVE-2021-22885)
Action Pack contains Information Disclosure / Unintended Method Execution vulnerability
- moderateGHSA-4g8v-vg43-wpgf(CVE-2023-28362)
Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to
- moderateGHSA-vfg9-r3fq-jvx4(BIT-rails-2024-47887, CVE-2024-47887)
Possible ReDoS vulnerability in HTTP Token authentication in Action Controller
- moderateGHSA-x76w-6vjr-8xgj(BIT-rails-2024-41128, CVE-2024-41128)
Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
- lowGHSA-8xww-x3g3-6jcv(CVE-2023-22795)
ReDoS based DoS vulnerability in Action Dispatch
- lowGHSA-p84v-45xj-wwqj(CVE-2023-22792)
ReDoS based DoS vulnerability in Action Dispatch
Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.
Required Ruby Version
>= 2.2.2
Required Rubygems Version
> 1.3.1
Authors
David Heinemeier Hansson
Versions
-
8.1.4
-
source
- 8.1.4 source September 24, 2026 (258 KB)
-
-
8.1.3.1
-
source
- 8.1.3.1 source July 29, 2026 (256 KB)
-
-
8.1.3
-
source
- 8.1.3 source March 24, 2026 (256 KB)
-
-
8.1.2.1
-
source
- 8.1.2.1 source March 23, 2026 (256 KB)
-
-
8.1.2
-
source
- 8.1.2 source January 08, 2026 (256 KB) vulnerable
-
-
5.0.0.rc1
-
source
- 5.0.0.rc1 source May 06, 2016 (201 KB) vulnerable
-
Requirements
none