Homepage

rails vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the rails package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • H
Arbitrary Code Injection

*
  • C
Deserialization of Untrusted Data

<2:4.1.8-1+deb8u7
  • H
Deserialization of Untrusted Data

<2:4.1.8-1+deb8u7
  • M
Cross-site Scripting (XSS)

<2:4.1.8-1+deb8u6
  • H
Allocation of Resources Without Limits or Throttling

<2:4.1.8-1+deb8u5
  • H
CVE-2019-5418

<2:4.1.8-1+deb8u5
  • M
Missing Encryption of Sensitive Data

*
  • H
SQL Injection

*
  • H
SQL Injection

*
  • H
SQL Injection

*
  • H
SQL Injection

*
  • M
Cross-site Scripting (XSS)

<2:4.1.8-1+deb8u4
  • H
Improper Input Validation

<2:4.1.8-1+deb8u2
  • M
Directory Traversal

<2:4.1.8-1+deb8u2
  • H
Directory Traversal

<2:4.1.8-1+deb8u1
  • L
Security Features

<2:4.1.8-1+deb8u1
  • H
Resource Management Errors

<2:4.1.8-1+deb8u1
  • H
Resource Management Errors

<2:4.1.8-1+deb8u1
  • M
Improper Access Control

<2:4.1.8-1+deb8u1
  • M
Improper Input Validation

<2:4.1.8-1+deb8u1
  • M
Cross-site Scripting (XSS)

<2:4.1.8-1+deb8u1
  • M
CVE-2015-3227

<2:4.1.8-1+deb8u1
  • M
Directory Traversal

<2:4.1.8-1
  • M
Directory Traversal

<2:4.1.8-1
  • H
Access Restriction Bypass

<2:4.1.5-1
  • H
SQL Injection

<2:4.1.4-1
  • H
SQL Injection

<2:4.1.4-1
  • M
Improper Input Validation

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Improper Input Validation

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Improper Input Validation

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • C
CVE-2013-0277

<2.3.14.1
  • M
Access Restriction Bypass

<2.3.14.1
  • H
CVE-2013-0333

<2.3.14.1
  • H
Improper Input Validation

<2.3.14.1
  • M
Access Restriction Bypass

<2.3.14.1
  • H
SQL Injection

<2.3.14.1
  • M
Information Exposure

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Arbitrary Code Injection

<2.3.14
  • M
Improper Input Validation

*
  • M
Cross-site Scripting (XSS)

<2.3.14
  • H
SQL Injection

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Cross-site Request Forgery (CSRF)

<2.3.11-0.1
  • M
Cross-site Scripting (XSS)

<2.3.11-0.1
  • M
Improper Input Validation

<2.2.3-1
  • M
Cross-site Scripting (XSS)

<2.2.3-2
  • M
Information Exposure

<2.2.3-1
  • M
Cross-site Scripting (XSS)

<2.2.3-1
  • C
Improper Authentication

<2.3.5-1
  • M
Cross-site Request Forgery (CSRF)

<2.1.0-6
  • H
SQL Injection

<2.1.0-1
  • M
Race Condition

<1.2.6-1
  • M
Information Exposure

<1.2.5-1
  • M
CVE-2007-5380

<1.2.5-1
  • M
Cross-site Scripting (XSS)

<1.2.5
  • H
CVE-2006-4112

<1.1.6-1
  • H
Arbitrary Code Injection

<1.1.5-1