Read the docs

Rails

Records164All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high43CVSS 7.0–8.9

Exploited now

Rails records in CISA KEV
TI-2019-03828 Rails Ruby on Rails Path Traversal Vulnerability Priority CRITICAL 90KEV 2025-07-07TI-2014-00124 Ruby on Rails Directory Traversal Vulnerability Priority CRITICAL 92KEV 2022-03-25TI-2016-00672 Ruby on Rails Directory Traversal Vulnerability Priority CRITICAL 90KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Rails 118 records CRITICAL Ruby On Rails 49 records HIGH Rails Html Sanitizers 10 records MEDIUM Html Sanitizer 4 records LOW Actionpack 2 records LOW Actionpack Page-caching 2 records MEDIUM Actionview 1 record LOW Active Record Session Store 1 record LOW

Records

10 records in Rails Html Sanitizers · all components

TI-2022-13919 CVE-2022-32209 · GHSA-pg8v-g4xq-hww9

Cross-site scripting in https://github.com/rails/rails-html-sanitizer

Priority MEDIUM 49

# Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.This vulnerability has been assigned the CVE identifier CVE-2022-32209.Ver…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.26501 Published 2022-06-24 Fixed in 1.4.3 CWE-79
Open these records in search →