Known Vulnerabilities for Ruby On Rails by Rubyonrails
Listed below are 10 of the newest known vulnerabilities associated with "Ruby On Rails" by "Rubyonrails".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-94462 json | Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/store/c... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-73330 json | CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute... | Not Provided | 2026-08-12 | 2026-08-14 |
| CVE-2026-70658 json | Pay is a payments engine for Ruby on Rails 6.0 and higher. Prior to 11.6.2, Pay::Webhooks::PaddleBillingController#valid_sign... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-57579 json | Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-55518 json | Avo is a framework to create admin panels for Ruby on Rails apps. Prior to 3.32.1 and 4.0.0.beta.51, Avo's association attach... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-54498 json | view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 ... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-54497 json | view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails. From 4.0.0 ... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-53769 json | Avo is a framework to create admin panels for Ruby on Rails apps. From version 2.28.0 to before version 3.32.0, Avo's direct ... | Not Provided | 2026-09-04 | 2026-09-09 |
| CVE-2026-44476 json | Doorkeeper is an OAuth 2 provider for Ruby on Rails. In version 1.9.0, an attacker who knows only a dynamically registered cl... | Not Provided | 2026-08-25 | 2026-08-26 |
| CVE-2017-17920 json | Not Provided | 2017-12-29 | 2025-04-20 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Rubyonrails | Ruby On Rails | 5.0.0 | |||
| Application | Rubyonrails | Ruby On Rails | 5.0.0 | |||
| Application | Rubyonrails | Ruby On Rails | 5.0.0 | |||
| Application | Rubyonrails | Ruby On Rails | 5.0.0 | |||
| Application | Rubyonrails | Ruby On Rails | 5.0.0 | |||
| Application | Rubyonrails | Ruby On Rails | 5.0.0 | |||
| Application | Rubyonrails | Ruby On Rails | 5.0.0 | |||
| Application | Rubyonrails | Ruby On Rails | 5.0.0 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.7 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.7 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.6 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.5.2 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.5.1 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.5 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.5 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.5 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.4 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.4 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.3 | |||
| Application | Rubyonrails | Ruby On Rails | 4.2.3 |