8 known security vulnerabilities

  • criticalGHSA-3hhc-qp5v-9p2j(CVE-2022-32224)

    Active Record RCE bug with Serialized Columns

Show 7 more vulnerabilities
1 critical5 high1 moderate
  • criticalGHSA-f57c-hx33-hvh8(CVE-2013-3221)

    Active Record component in Ruby on Rails has a data-type injection vulnerability

  • highGHSA-579w-22j4-4749(CVE-2022-44566)

    Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter

  • highGHSA-76wq-xw4h-f8wj(CVE-2012-2695)

    activerecord vulnerable to SQL Injection

  • highGHSA-gh2w-j7cx-2664(CVE-2012-6496)

    Active Record contains SQL Injection

  • highGHSA-h6w6-xmqv-7q78(CVE-2011-2930)

    activerecord vulnerable to SQL Injection

  • highGHSA-mhwp-qhpc-h3jm(CVE-2014-3482)

    SQL Injection in Active Record

  • moderateGHSA-76r7-hhxj-r776(CVE-2025-55193)

    Active Record logging vulnerable to ANSI escape injection

Databases on Rails. Build a persistent domain model by mapping database tables to Ruby classes. Strong conventions for associations, validations, aggregations, migrations, and testing come baked-in.

Required Ruby Version

>= 1.8.7

Required Rubygems Version

> 1.3.1

Authors

David Heinemeier Hansson

Versions

  1. 8.1.4

    1. source

      1. 8.1.4 source September 24, 2026 (566 KB)
  2. 8.1.3.1

    1. source

      1. 8.1.3.1 source July 29, 2026 (556 KB)
  3. 8.1.3

    1. source

      1. 8.1.3 source March 24, 2026 (556 KB)
  4. 8.1.2.1

    1. source

      1. 8.1.2.1 source March 23, 2026 (555 KB)
  5. 8.1.2

    1. source

      1. 8.1.2 source January 08, 2026 (554 KB)
  6. 3.0.0.beta3

    1. source

      1. 3.0.0.beta3 source April 13, 2010 (328 KB)
Show all versions (524 total)

SHA 256 checksum

← Previous version Next version →