Ruby
Ruby and Rails. Newest first.
0 Ruby incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 472
- Longest quiet run: 472 days (Jul 8–Oct 22)
Show 2 older incidents2 older incidents
July 2025 1
HighRails Ruby on Rails: Ruby on Rails Path Traversal VulnerabilityPatched
Rails Ruby on Rails Patched
Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents. Added to CISA KEV on 2025-07-07.
Open incident →CVE-2019-5418
January 2024 1
CriticalGitLab Community and Enterprise Editions Improper Access ControlPatched
GitLab CE/EE Patched
GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover. Added to the CISA KEV catalog on 2024-05-01. CVE-2023-7028 was assigned before 2024; the KEV listing came in 2024.
Open incident →CVE-2023-7028
