Known Vulnerabilities for Rails by Rails
Listed below are 10 of the newest known vulnerabilities associated with "Rails" by "Rails".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126083 json | Action Pack is a framework for handling and responding to web requests. From 8.1 until 8.1.4.1, Since Rails 8.1.0, ActionDisp... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126082 json | Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record object... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126081 json | Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Param... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126080 json | Active Support is a collection of utility classes and standard library extensions used by Rails and other Ruby projects. Prio... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126079 json | Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126075 json | Active Support is a collection of utility classes and standard library extensions used by Rails and other Ruby projects. From... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-126068 json | Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails. Prior to 8.1.4.1 and 8.0.5.2, the... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-125109 json | Rack is a modular Ruby web server interface. From 3.0 until 3.1.23 and 3.2.8, Rack::Request#host_with_port, #base_url, and #u... | Not Provided | 2026-11-09 | 2026-11-10 |
| CVE-2026-122006 json | The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server read ... | Not Provided | 2026-11-04 | 2026-11-05 |
| CVE-2026-95813 json | e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails url_for in PaginatorComponent and control... | Not Provided | 2026-09-22 | 2026-09-26 |