Homepage

rails vulnerabilities

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the rails package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free
VulnerabilityVulnerable Version
  • H
Arbitrary Code Injection

*
  • C
Deserialization of Untrusted Data

<2:4.1.8-1+deb8u7
  • H
Deserialization of Untrusted Data

<2:4.1.8-1+deb8u7
  • M
Cross-site Scripting (XSS)

<2:4.1.8-1+deb8u6
  • H
Allocation of Resources Without Limits or Throttling

<2:4.1.8-1+deb8u5
  • H
CVE-2019-5418

<2:4.1.8-1+deb8u5
  • M
Missing Encryption of Sensitive Data

*
  • H
SQL Injection

*
  • H
SQL Injection

*
  • H
SQL Injection

*
  • H
SQL Injection

*
  • M
Cross-site Scripting (XSS)

<2:4.1.8-1+deb8u4
  • M
Directory Traversal

<2:4.1.8-1+deb8u2
  • H
Improper Input Validation

<2:4.1.8-1+deb8u2
  • L
Security Features

<2:4.1.8-1+deb8u1
  • M
Improper Input Validation

<2:4.1.8-1+deb8u1
  • M
Improper Access Control

<2:4.1.8-1+deb8u1
  • H
Resource Management Errors

<2:4.1.8-1+deb8u1
  • H
Directory Traversal

<2:4.1.8-1+deb8u1
  • H
Resource Management Errors

<2:4.1.8-1+deb8u1
  • M
CVE-2015-3227

<2:4.1.8-1+deb8u1
  • M
Cross-site Scripting (XSS)

<2:4.1.8-1+deb8u1
  • M
Directory Traversal

<2:4.1.8-1
  • M
Directory Traversal

<2:4.1.8-1
  • H
Access Restriction Bypass

<2:4.1.5-1
  • H
SQL Injection

<2:4.1.4-1
  • H
SQL Injection

<2:4.1.4-1
  • M
Improper Input Validation

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Improper Input Validation

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Improper Input Validation

<2.3.14.1
  • C
CVE-2013-0277

<2.3.14.1
  • M
Access Restriction Bypass

<2.3.14.1
  • H
CVE-2013-0333

<2.3.14.1
  • M
Access Restriction Bypass

<2.3.14.1
  • H
Improper Input Validation

<2.3.14.1
  • M
Information Exposure

<2.3.14.1
  • H
SQL Injection

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14.1
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.14
  • M
Arbitrary Code Injection

<2.3.14
  • M
Improper Input Validation

*
  • H
SQL Injection

<2.3.14
  • M
Cross-site Scripting (XSS)

<2.3.11-0.1
  • M
Cross-site Request Forgery (CSRF)

<2.3.11-0.1
  • M
Improper Input Validation

<2.2.3-1
  • M
Cross-site Scripting (XSS)

<2.2.3-2
  • M
Cross-site Scripting (XSS)

<2.2.3-1
  • M
Information Exposure

<2.2.3-1
  • C
Improper Authentication

<2.3.5-1
  • M
Cross-site Request Forgery (CSRF)

<2.1.0-6
  • H
SQL Injection

<2.1.0-1
  • M
Race Condition

<1.2.6-1
  • M
CVE-2007-5380

<1.2.5-1
  • M
Information Exposure

<1.2.5-1
  • M
Cross-site Scripting (XSS)

<1.2.5
  • H
CVE-2006-4112

<1.1.6-1
  • H
Arbitrary Code Injection

<1.1.5-1