Activerecord Project - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2023-02-09.

Products

• Activerecord - 3 CVEs

Newest CVEs of Activerecord Project

• CVE-2023-22794 - CVSS 8.8 (high), 2023-02-09: A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the…
• CVE-2022-44566 - CVSS 7.5 (high), 2023-02-09: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed…
• CVE-2022-32224 - CVSS 9.8 (critical), 2022-12-05: A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could…