[CVE-2024-47889] Possible ReDoS vulnerability in block_format in Action Mailer
|
|
0
|
575
|
October 15, 2024
|
[CVE-2024-54133] Possible Content Security Policy bypass in Action Dispatch
|
|
0
|
769
|
December 10, 2024
|
How to implement key rotation for deterministic encryption?
|
|
0
|
30
|
December 5, 2024
|
Is `accept_nested_attributes_for` considered safe when used with Delegated Types?
|
|
4
|
89
|
October 28, 2024
|
[CVE-2024-47888] Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text
|
|
0
|
476
|
October 15, 2024
|
[CVE-2024-41128] Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
|
|
0
|
597
|
October 15, 2024
|
[CVE-2024-47887] Possible ReDoS vulnerability in HTTP Token authentication in Action Controller
|
|
0
|
732
|
October 15, 2024
|
How to implement secret rotation?
|
|
4
|
1565
|
November 20, 2023
|
[CVE-2023-38037] Possible File Disclosure of Locally Encrypted Files
|
|
0
|
6029
|
August 22, 2023
|
[CVE-2023-28362] Possible XSS via User Supplied Values to redirect_to
|
|
0
|
11981
|
June 26, 2023
|
[CVE-2023-22799] Possible ReDoS based DoS vulnerability in GlobalID
|
|
0
|
5961
|
January 17, 2023
|
[CVE-2022-44572] Possible Denial of Service Vulnerability in Rack's RFC2183 boundary parsing
|
|
0
|
4529
|
January 17, 2023
|
[CVE-2022-44571] Possible Denial of Service Vulnerability in Rack Content-Disposition parsing
|
|
0
|
6775
|
January 17, 2023
|
[CVE-2023-27539] Possible Denial of Service Vulnerability in Rack's header parsing
|
|
0
|
6913
|
March 13, 2023
|
[CVE-2023-27531] Possible Deserialization of Untrusted Data vulnerability in Kredis JSON
|
|
0
|
3897
|
March 13, 2023
|
[CVE-2023-28120] Possible XSS Security Vulnerability in SafeBuffer#bytesplice
|
|
0
|
8279
|
March 13, 2023
|
[CVE-2023-23913] DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements
|
|
0
|
6385
|
March 13, 2023
|
Help Needed: Auto-incrementing ID vulnerability causing database malfunctions
|
|
1
|
1160
|
March 13, 2023
|
[CVE-2023-27530] Possible DoS Vulnerability in Multipart MIME parsing
|
|
0
|
10452
|
March 2, 2023
|
Is It Possible for an Attacker to Parse and Submit Authenticity Token Separately?
|
|
2
|
1335
|
February 17, 2023
|
[CVE-2022-44570] Possible Denial of Service Vulnerability in Rack's Range header parsing
|
|
0
|
7203
|
January 17, 2023
|
[CVE-2023-22794] SQL Injection Vulnerability via ActiveRecord comments
|
|
0
|
30949
|
January 17, 2023
|
[CVE-2023-22795] Possible ReDoS based DoS vulnerability in Action Dispatch
|
|
0
|
7605
|
January 17, 2023
|
[CVE-2022-44566] Possible Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
|
|
0
|
7454
|
January 17, 2023
|
[CVE-2023-22797] Possible Open Redirect Vulnerability in Action Pack
|
|
0
|
5407
|
January 17, 2023
|
[CVE-2023-22796] Possible ReDoS based DoS vulnerability in Active Support's underscore
|
|
0
|
7590
|
January 17, 2023
|
[CVE-2023-22792] Possible ReDoS based DoS vulnerability in Action Dispatch
|
|
0
|
7515
|
January 17, 2023
|
Add OpenSSF Scorecard GitHub Action
|
|
0
|
1474
|
December 12, 2022
|
[CVE-2022-32224] Possible RCE escalation bug with Serialized Columns in Active Record
|
|
0
|
39618
|
July 12, 2022
|
Google sign-in (OAuth): should I allow to add it to existing accounts?
|
|
5
|
1584
|
July 1, 2022
|