Activesupport (Activesupport Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 408 known versions, newest CVE from 2023-02-09. Vendor: Activesupport Project.

CVEs of Activesupport

• CVE-2023-22796 - CVSS 7.5 (high), 2023-02-09: A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the…
• CVE-2018-3779 - CVSS 9.8 (critical), 2018-08-10: active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker…