11 known security vulnerabilities

  • criticalGHSA-3hhc-qp5v-9p2j(CVE-2022-32224)

    Active Record RCE bug with Serialized Columns

Show 10 more vulnerabilities
2 critical6 high2 moderate
  • criticalGHSA-f57c-hx33-hvh8(CVE-2013-3221)

    Active Record component in Ruby on Rails has a data-type injection vulnerability

  • criticalGHSA-fhj9-cjjh-27vm(CVE-2013-0277)

    Active Record contains deserialization of arbitrary YAML

  • highGHSA-579w-22j4-4749(CVE-2022-44566)

    Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter

  • highGHSA-76wq-xw4h-f8wj(CVE-2012-2695)

    activerecord vulnerable to SQL Injection

  • highGHSA-gh2w-j7cx-2664(CVE-2012-6496)

    Active Record contains SQL Injection

  • highGHSA-h6w6-xmqv-7q78(CVE-2011-2930)

    activerecord vulnerable to SQL Injection

  • highGHSA-mhwp-qhpc-h3jm(CVE-2014-3482)

    SQL Injection in Active Record

  • highGHSA-xf96-32q2-9rw2(CVE-2008-4094)

    Rails ActiveRecord gem vulnerable to SQL injection

  • moderateGHSA-76r7-hhxj-r776(CVE-2025-55193)

    Active Record logging vulnerable to ANSI escape injection

  • moderateGHSA-gr44-7grc-37vq(CVE-2013-0276)

    ActiveRecord vulnerable to modification of protected model attributes

Implements the ActiveRecord pattern (Fowler, PoEAA) for ORM. It ties database tables and classes together for business objects, like Customer or Subscription, that can find, save, and destroy themselves without resorting to manual SQL.

Required Ruby Version

None

Authors

David Heinemeier Hansson

Versions

  1. 8.1.4

    1. source

      1. 8.1.4 source September 24, 2026 (566 KB)
  2. 8.1.3.1

    1. source

      1. 8.1.3.1 source July 29, 2026 (556 KB)
  3. 8.1.3

    1. source

      1. 8.1.3 source March 24, 2026 (556 KB)
  4. 8.1.2.1

    1. source

      1. 8.1.2.1 source March 23, 2026 (555 KB)
  5. 8.1.2

    1. source

      1. 8.1.2 source January 08, 2026 (554 KB)
  6. 2.0.5

    1. source

      1. 2.0.5 source October 18, 2008 (415 KB)
Show all versions (524 total)

SHA 256 checksum

← Previous version Next version →