Homepage

rails vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the rails package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • H
Arbitrary Code Injection

*
  • C
Deserialization of Untrusted Data

<2:4.1.8-1+deb8u7
  • H
Deserialization of Untrusted Data

<2:4.1.8-1+deb8u7
  • M
Cross-site Scripting (XSS)

<2:4.1.8-1+deb8u6
  • H
Allocation of Resources Without Limits or Throttling

<2:4.1.8-1+deb8u5
  • H
CVE-2019-5418

<2:4.1.8-1+deb8u5
  • M
Missing Encryption of Sensitive Data

*
  • H
SQL Injection

*
  • H
SQL Injection

*
  • H
SQL Injection

*
  • H
SQL Injection

*
  • M
Cross-site Scripting (XSS)

<2:4.1.8-1+deb8u4
  • H
Improper Input Validation

<2:4.1.8-1+deb8u2
  • M
Directory Traversal

<2:4.1.8-1+deb8u2
  • H
Resource Management Errors

<2:4.1.8-1+deb8u1
  • L
Security Features

<2:4.1.8-1+deb8u1
  • H
Resource Management Errors

<2:4.1.8-1+deb8u1
  • H
Directory Traversal

<2:4.1.8-1+deb8u1
  • M
Improper Input Validation

<2:4.1.8-1+deb8u1
  • M
Improper Access Control

<2:4.1.8-1+deb8u1
  • M
Cross-site Scripting (XSS)

<2:4.1.8-1+deb8u1
  • M
CVE-2015-3227

<2:4.1.8-1+deb8u1
  • M
Directory Traversal

<2:4.1.8-1
  • M
Directory Traversal

<2:4.1.8-1
  • H
Access Restriction Bypass

<2:4.1.5-1
  • H
SQL Injection

<2:4.1.4-1
  • H
SQL Injection

<2:4.1.4-1
  • M
Improper Input Validation

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Improper Input Validation

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Improper Input Validation

<2.3.14.1
  • C
CVE-2013-0277

<2.3.14.1
  • M
Access Restriction Bypass

<2.3.14.1
  • H
CVE-2013-0333

<2.3.14.1
  • H
Improper Input Validation

<2.3.14.1
  • M
Access Restriction Bypass

<2.3.14.1
  • H
SQL Injection

<2.3.14.1
  • M
Information Exposure

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Arbitrary Code Injection

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Improper Input Validation

*
  • H
SQL Injection

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.11-0.1
  • M
Cross-site Request Forgery (CSRF)

<2.3.11-0.1
  • M
Improper Input Validation

<2.2.3-1
  • M
Cross-site Scripting (XSS)

<2.2.3-2
  • M
Information Exposure

<2.2.3-1
  • M
Cross-site Scripting (XSS)

<2.2.3-1
  • C
Improper Authentication

<2.3.5-1
  • M
Cross-site Request Forgery (CSRF)

<2.1.0-6
  • H
SQL Injection

<2.1.0-1
  • M
Race Condition

<1.2.6-1
  • M
CVE-2007-5380

<1.2.5-1
  • M
Information Exposure

<1.2.5-1
  • M
Cross-site Scripting (XSS)

<1.2.5
  • H
Arbitrary Code Injection

<1.1.5-1
  • H
CVE-2006-4112

<1.1.6-1