4 known security vulnerabilities

  • criticalGHSA-3hhc-qp5v-9p2j(CVE-2022-32224)

    Active Record RCE bug with Serialized Columns

Show 3 more vulnerabilities
2 high1 moderate
  • highGHSA-579w-22j4-4749(CVE-2022-44566)

    Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter

  • highGHSA-8hc4-xxm3-5ppp(CVE-2021-22880)

    Active Record subject to Regular Expression Denial-of-Service (ReDoS)

  • moderateGHSA-76r7-hhxj-r776(CVE-2025-55193)

    Active Record logging vulnerable to ANSI escape injection

Databases on Rails. Build a persistent domain model by mapping database tables to Ruby classes. Strong conventions for associations, validations, aggregations, migrations, and testing come baked-in.

Required Ruby Version

>= 2.2.2

Authors

David Heinemeier Hansson

Versions

  1. 8.1.4.1

    1. source

      1. 8.1.4.1 source November 04, 2026 (566 KB)
  2. 8.1.4

    1. source

      1. 8.1.4 source September 24, 2026 (566 KB)
  3. 8.1.3.1

    1. source

      1. 8.1.3.1 source July 29, 2026 (556 KB)
  4. 8.1.3

    1. source

      1. 8.1.3 source March 24, 2026 (556 KB)
  5. 8.1.2.1

    1. source

      1. 8.1.2.1 source March 23, 2026 (555 KB)
  6. 5.0.3

    1. source

      1. 5.0.3 source May 12, 2017 (353 KB)
Show all versions (526 total)

SHA 256 checksum

← Previous version Next version →