Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: https://github.com/rails/rails — FEDORA-2021-b571fca1b8 Clear all filters
TI-2021-05742 CVE-2021-22881 · GHSA-8877-prq4-9xfw

Open redirect in https://github.com/rails/rails

Priority HIGH 69

The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.87301 Published 2021-02-11 Partial fix · 6.0.3.5, 6.1.2.1 CWE-601
TI-2021-05741 CVE-2021-22880 · GHSA-8hc4-xxm3-5ppp

Uncontrolled resource consumption in https://github.com/rails/rails

Priority MEDIUM 40

The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04487 Published 2021-02-11 Partial fix · 5.2.4.5, 6.0.3.5 +1 CWE-400