PkgSeer

Vulnerability GHSA-2586-8ghr-69fj

Medium Risk
MEDIUM RISK
CVSS Score: 4.2
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
11 hours ago
November 10, 2026 at 09:19 PM UTC
Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4

Summary

Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore

Details

Impact

ActionDispatch::Session::CacheStore writes a session back to the cache at the end of each request that loaded it, without checking that the session's cache entry still exists. When a concurrent request destroys the session, through reset_session on logout or by deleting its cache entry on the server, a request that loaded the session earlier and finishes later restores it under its original session ID. Logout and server-side revocation could therefore fail to end a session, and an attacker who holds a stolen session cookie could keep that session valid across the victim's logout.

Applications that use config.session_store :cache_store are affected, with any cache backend. ActionDispatch::Session::CookieStore is not affected, nor is ActionDispatch::Session::MemCacheStore with Dalli 4.0.0 or later, whose session store does not write back a session that was deleted.

Details

The fixed releases record which session a request loaded and skip the write when that session's cache entry no longer exists. Changes that such a request makes to the destroyed session are discarded, and Rack logs a warning that the session could not be saved. Each request that writes back a session it loaded makes one additional cache read.

Releases

The fixed releases are available at the normal locations.

Patches for those who cannot upgrade at once:

Credit

Found by the team during internal code review.

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Medium Risk
11 hours ago
Action Pack: Possible cache poisoning in Action Pack content negotiation
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-r9jg-fmfx-2gv6
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-r9jg-fmfx-2gv6
Low Risk
11 hours ago
Action Pack: Missing SameSite attribute on session cookies from Action Pack session stores
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-gmj8-hvj3-49mw
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-gmj8-hvj3-49mw
High Risk
11 hours ago
Action Pack: Possible IP spoofing in Action Dispatch RemoteIp
8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-2gff-2mmg-m73p
8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-2gff-2mmg-m73p
Low Risk
7 months ago
Rails has a possible XSS vulnerability in its Action Pack debug exceptions
8.1.0 - 8.1.2 GHSA-pgm4-439c-5jp6
8.1.0 - 8.1.2 GHSA-pgm4-439c-5jp6
Low Risk
1 year ago
Possible Content Security Policy bypass in Action Dispatch
5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 - 8.0.0 GHSA-vfm5-rmrh-j26v
5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 - 8.0.0 GHSA-vfm5-rmrh-j26v
View all vulnerabilities for these packages

Impacted packages

Timeline

Published
11 hours ago
November 10, 2026 at 09:19 PM UTC
Fixed (8.1.4.1)
7 days ago
November 04, 2026 at 02:47 AM UTC
Last Modified
11 hours ago
November 10, 2026 at 09:30 PM UTC