10 known security vulnerabilities

  • criticalGHSA-3hhc-qp5v-9p2j(CVE-2022-32224)

    Active Record RCE bug with Serialized Columns

Show 9 more vulnerabilities
2 critical4 high3 moderate
  • criticalGHSA-f57c-hx33-hvh8(CVE-2013-3221)

    Active Record component in Ruby on Rails has a data-type injection vulnerability

  • criticalGHSA-fhj9-cjjh-27vm(CVE-2013-0277)

    Active Record contains deserialization of arbitrary YAML

  • highGHSA-579w-22j4-4749(CVE-2022-44566)

    Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter

  • highGHSA-76wq-xw4h-f8wj(CVE-2012-2695)

    activerecord vulnerable to SQL Injection

  • highGHSA-gh2w-j7cx-2664(CVE-2012-6496)

    Active Record contains SQL Injection

  • highGHSA-mhwp-qhpc-h3jm(CVE-2014-3482)

    SQL Injection in Active Record

  • moderateGHSA-3crr-9vmg-864v(CVE-2013-1854)

    Active Record Improper Input Validation

  • moderateGHSA-76r7-hhxj-r776(CVE-2025-55193)

    Active Record logging vulnerable to ANSI escape injection

  • moderateGHSA-gr44-7grc-37vq(CVE-2013-0276)

    ActiveRecord vulnerable to modification of protected model attributes

This version has been yanked, and it is not available for download directly or for other gems that may have depended on it.

Versions

  1. 8.1.4

    1. source

      1. 8.1.4 source September 24, 2026 (566 KB)
  2. 8.1.3.1

    1. source

      1. 8.1.3.1 source July 29, 2026 (556 KB)
  3. 8.1.3

    1. source

      1. 8.1.3 source March 24, 2026 (556 KB)
  4. 8.1.2.1

    1. source

      1. 8.1.2.1 source March 23, 2026 (555 KB)
  5. 8.1.2

    1. source

      1. 8.1.2 source January 08, 2026 (554 KB)
  6. 2.3.13

    1. source

      1. 2.3.13 source August 16, 2011 (528 KB) yanked
Show all versions (524 total)

Yanked by

dwradcliffe

SHA 256 checksum

← Previous version Next version →