Activesupport Project - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2023-02-09.

Products

• Activesupport - 2 CVEs

Newest CVEs of Activesupport Project

• CVE-2023-22796 - CVSS 7.5 (high), 2023-02-09: A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the…
• CVE-2018-3779 - CVSS 9.8 (critical), 2018-08-10: active-support ruby gem 5.2.0 could allow a remote attacker to execute arbitrary code on the system, caused by containing a malicious backdoor. An attacker…