Security advisories

medium2017-10-24

CVE-2013-6416-actionpack Cross-site Scripting vulnerability

View chart →

rails/rails · GHSA-w37c-q653-qg95

medium2017-10-24

CVE-2015-3226-activesupport Cross-site Scripting vulnerability

View chart →

rails/rails · GHSA-vxvp-4xwc-jpp6

high2017-10-24

CVE-2014-2888-sfpagent Command Injection vulnerability

View chart →

herry13/sfpagent · GHSA-vm28-mrm7-fpjq

medium2017-10-24

CVE-2015-8856-Cross-Site Scripting in serve-index

View chart →

expressjs/serve-index · GHSA-v633-x5vv-hqwc

medium2017-10-24

CVE-2014-2538-rack-ssl Cross-site Scripting vulnerability

View chart →

josh/rack-ssl · GHSA-v3rr-cph9-2g2q

medium2017-10-24

CVE-2015-3225-Rack vulnerable to Denial of Service via large parameter depth request

View chart →

rack/rack · GHSA-rgr4-9jh5-j4j6

medium2017-10-24

CVE-2015-7579-rails-html-sanitizer Cross-site Scripting vulnerability

View chart →

rails/rails-html-sanitizer · GHSA-r9c2-cr39-c8g6

medium2017-10-24

CVE-2015-9097-Mail Gem CRLF Injection vulnerability

View chart →

mikel/mail · GHSA-q86f-fmqf-qrf6

critical2017-10-24

CVE-2014-9682-dns-sync command injection vulnerability

View chart →

skoranga/node-dns-sync · GHSA-q5pq-pgrv-fh89

low2017-10-24

CVE-2015-7576-actionpack is vulnerable to remote bypass authentication

View chart →

rails/rails · GHSA-p692-7mm3-3fxg

high2017-10-24

CVE-2013-7086-Webbynode Code Injection vulnerability

View chart →

webbynode/webbynode · GHSA-p65m-qr5x-rrqq

low2017-10-24

CVE-2015-3448-rest-client allows local users to obtain sensitive information by reading the log

View chart →

rest-client/rest-client · GHSA-mx9f-w8qq-q5jf

high2017-10-24

CVE-2014-3482-SQL Injection in Active Record

View chart →

rails/rails · GHSA-mhwp-qhpc-h3jm

medium2017-10-24

CVE-2014-0081-Rails vulnerable to Cross-site Scripting

View chart →

rails/rails · GHSA-m46p-ggm5-5j83

high2017-10-24

CVE-2014-7191-Denial-of-Service Memory Exhaustion in qs

View chart →

visionmedia/node-querystring · GHSA-jjv7-qpx3-h62q

medium2017-10-24

CVE-2015-8859-Root Path Disclosure in send

View chart →

pillarjs/send · GHSA-jgqf-hwc5-hh37

medium2017-10-24

CVE-2015-3227-activesupport vulnerable to Denial of Service via large XML document depth

View chart →

rails/rails · GHSA-j96r-xvjq-r9pg

medium2017-10-24

CVE-2014-0080-Array data injection vulnerability in activerecord

View chart →

rails/rails · GHSA-hqf9-rc9j-5fmj

high2017-10-24

CVE-2015-8854-Regular Expression Denial of Service in marked

View chart →

chjj/marked · GHSA-hjcp-j389-59ff

high2017-10-24

CVE-2014-2322-Arabic Prawn allows remote attackers to execute arbitrary commands via shell metacharacters

View chart →

ozeron/prawn-arabic · GHSA-hgmw-x865-hf9x