Vulnerability GHSA-2gff-2mmg-m73p
High Risk
HIGH RISK
CVSS Score: 7.4
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
11 hours ago
November 10, 2026 at 09:20 PM UTC
Action Pack: Possible IP spoofing in Action Dispatch RemoteIp
8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4
8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4
Summary
Action Pack: Possible IP spoofing in Action Dispatch RemoteIp
Details
Impact
Since Rails 8.1.0, ActionDispatch::RemoteIp derives request.remote_ip from Rack::Request#forwarded_for, which under Rack 3 reads the RFC 7239 Forwarded header in preference to X-Forwarded-For. When a reverse proxy appends the client address to X-Forwarded-For but passes a client-supplied Forwarded header through unchanged, request.remote_ip returns an address chosen by the client, and the IP spoofing check does not raise, because it compares only Client-Ip with the forwarded addresses. An unauthenticated attacker could therefore spoof request.remote_ip, possibly bypassing IP-based access controls and rate limits keyed on the client address (including the default by: of rate_limit), and falsifying the client address in logs.
Details
The 8.1.0 change ( 2d084af8) switched ActionDispatch::RemoteIp from reading X-Forwarded-For directly to Rack's forwarded_for, in order to reuse Rack's port handling. Rails continues to honor Forwarded, the standard header.
In the fixed releases, when config.action_dispatch.ip_spoofing_check is enabled (the default), ActionDispatch::RemoteIp also compares the first untrusted client address in Forwarded with the first untrusted client address in X-Forwarded-For, as exact strings, and raises ActionDispatch::RemoteIp::IpSpoofAttackError when both headers are present and the addresses differ. Deployments whose proxies report the client address inconsistently between the two headers will receive this error after upgrading. See the actionpack CHANGELOG.
Affected applications
An application is affected if it meets all of these requirements:
- Runs Rails 8.1.0 through 8.1.4 with Rack 3. Under Rack 2.2,
forwarded_forreads onlyX-Forwarded-For. - Is served behind a proxy that does not remove or overwrite a client-supplied
Forwardedheader. - Relies on
request.remote_ipfor access control, rate limiting, or auditing.
The fix detects a spoofed Forwarded header only when the proxy also sets X-Forwarded-For. An application whose proxy passes a client-supplied Forwarded header through and sets no X-Forwarded-For remains exposed after upgrading, and should configure the proxy to remove or overwrite Forwarded, or apply the workaround below.
Mitigation
- Upgrade to a fixed version of
actionpack. - Configure reverse proxies to remove or overwrite any client-supplied
Forwardedheader.
Workarounds
Applications whose proxies set X-Forwarded-For can make Rack ignore the Forwarded header, restoring the client address resolution of Rails 8.0, by setting Rack::Request.forwarded_priority = [:x_forwarded] in an initializer. This setting is available in Rack 3.0.0 and later, and it also causes Rack to ignore Forwarded when determining the request scheme, host, and port.
Releases
The fixed releases are available at the normal locations.
Patches for those who cannot upgrade at once:
Versions affected
- actionpack >= 8.1, < 8.1.4.1
Credit
This issue was responsibly reported by HackerOne researcher luryus.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
11 hours ago
Action Pack: Possible cache poisoning in Action Pack content negotiation
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-r9jg-fmfx-2gv6
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-r9jg-fmfx-2gv6
Low Risk
11 hours ago
Action Pack: Missing SameSite attribute on session cookies from Action Pack session stores
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-gmj8-hvj3-49mw
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-gmj8-hvj3-49mw
Medium Risk
11 hours ago
Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-2586-8ghr-69fj
0.9.0 and 0.9.5 - 1.9.1 and 1.10.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-2586-8ghr-69fj
Low Risk
7 months ago
Rails has a possible XSS vulnerability in its Action Pack debug exceptions
8.1.0 - 8.1.2 GHSA-pgm4-439c-5jp6
8.1.0 - 8.1.2 GHSA-pgm4-439c-5jp6
Low Risk
1 year ago
Possible Content Security Policy bypass in Action Dispatch
5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 - 8.0.0 GHSA-vfm5-rmrh-j26v
5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 - 8.0.0 GHSA-vfm5-rmrh-j26v
Impacted packages
Timeline
Published
11 hours ago
November 10, 2026 at 09:20 PM UTC
Fixed (8.1.4.1)
7 days ago
November 04, 2026 at 02:47 AM UTC
Last Modified
11 hours ago
November 10, 2026 at 09:30 PM UTC