Vulnerability GHSA-2w9f-fxwj-w2qf
Medium Risk
MEDIUM RISK
CVSS Score: 4.7
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
11 hours ago
November 10, 2026 at 09:27 PM UTC
Active Support: Possible XSS vulnerability in Active Support MessagePack serializer
8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4
8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4
Summary
Active Support: Possible XSS vulnerability in Active Support MessagePack serializer
Details
Impact
ActiveSupport::MessagePack serializes an ActiveSupport::SafeBuffer as its bytes alone and deserializes it as a new SafeBuffer, so a buffer that is no longer html_safe? (for example, one mutated in place with gsub!) is restored as html_safe. If such a buffer holds untrusted input and is stored through a MessagePack serializer, rendering it after it is loaded bypasses ERB auto-escaping, possibly leading to XSS.
Applications on Rails 8.1 are affected if they use a MessagePack serializer, such as config.action_dispatch.cookies_serializer = :message_pack or :message_pack_allow_marshal, or serializer: :message_pack for Rails.cache, ActiveSupport::MessageVerifier or ActiveSupport::MessageEncryptor, and store a SafeBuffer that was mutated in place with untrusted input. Rails 8.0 and earlier do not serialize SafeBuffer with MessagePack and are not affected.
Details
The fixed releases serialize a SafeBuffer that is not html_safe? with a marker and deserialize it as a String; a SafeBuffer that is html_safe? keeps the existing format. Versions without the fix cannot read an unsafe buffer serialized by the fixed releases, so during a rolling deploy a cookie or cache entry holding one could fail to load on a process that has not been upgraded.
Workarounds
Applications that cannot upgrade can convert a SafeBuffer to a String with to_str before storing it in a value that a MessagePack serializer writes.
Releases
The fixed releases are available at the normal locations.
Patches for those who cannot upgrade at once:
Credit
This issue was responsibly reported by HackerOne researcher jcwilk.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
11 hours ago
Active Support: Possible DoS vulnerability in Active Support safe_constantize
1.0.0 - 1.1.1 and 1.2.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.5 and 2.3.6.pre and 2.3.6 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.pre and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-8474-xrp6-wh69
1.0.0 - 1.1.1 and 1.2.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.5 and 2.3.6.pre and 2.3.6 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.pre and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 7.2.3.1 and 7.2.3.2 and 7.2.4 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.0.4.1 and 8.0.5 and 8.0.5.1 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 and 8.1.2.1 and 8.1.3 and 8.1.3.1 and 8.1.4 GHSA-8474-xrp6-wh69
Medium Risk
7 months ago
Rails Active Support has a possible DoS vulnerability in its number helpers
1.0.0 - 1.1.1 and 1.2.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.5 and 2.3.6.pre and 2.3.6 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.pre and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-2j26-frm8-cmj9
1.0.0 - 1.1.1 and 1.2.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.5 and 2.3.6.pre and 2.3.6 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.pre and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-2j26-frm8-cmj9
Medium Risk
7 months ago
Rails Active Support has a possible XSS vulnerability in SafeBuffer#%
1.0.0 - 1.1.1 and 1.2.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.5 and 2.3.6.pre and 2.3.6 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.pre and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-89vf-4333-qx8v
1.0.0 - 1.1.1 and 1.2.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.5 and 2.3.6.pre and 2.3.6 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.pre and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-89vf-4333-qx8v
Medium Risk
7 months ago
Rails Active Support has a possible ReDoS vulnerability in number_to_delimited
1.0.0 - 1.1.1 and 1.2.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.5 and 2.3.6.pre and 2.3.6 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.pre and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-cg4j-q9v8-6v38
1.0.0 - 1.1.1 and 1.2.1 - 2.0.2 and 2.0.4 - 2.1.2 and 2.2.2 - 2.2.3 and 2.3.2 - 2.3.5 and 2.3.6.pre and 2.3.6 - 2.3.7 and 2.3.8.pre1 and 2.3.8 and 2.3.9.pre and 2.3.9 - 2.3.12 and 2.3.14 - 2.3.18 and 3.0.pre and 3.0.0.beta and 3.0.0.beta2 and 3.0.0.beta3 and 3.0.0.beta4 and 3.0.0.rc and 3.0.0.rc2 and 3.0.0 - 3.0.3 and 3.0.4.rc1 and 3.0.4 and 3.0.5.rc1 and 3.0.5 and 3.0.6.rc1 and 3.0.6.rc2 and 3.0.6 and 3.0.7.rc1 and 3.0.7.rc2 and 3.0.7 and 3.0.8.rc1 and 3.0.8.rc2 and 3.0.8.rc4 and 3.0.8 and 3.0.9.rc1 and 3.0.9.rc3 and 3.0.9.rc4 and 3.0.9.rc5 and 3.0.9 and 3.0.10.rc1 and 3.0.10 - 3.0.11 and 3.0.12.rc1 and 3.0.12 and 3.0.13.rc1 and 3.0.13 - 3.0.20 and 3.1.0.beta1 and 3.1.0.rc1 and 3.1.0.rc2 and 3.1.0.rc3 and 3.1.0.rc4 and 3.1.0.rc5 and 3.1.0.rc6 and 3.1.0.rc8 and 3.1.0 and 3.1.1.rc1 and 3.1.1.rc2 and 3.1.1.rc3 and 3.1.1 and 3.1.2.rc1 and 3.1.2.rc2 and 3.1.2 - 3.1.3 and 3.1.4.rc1 and 3.1.4 and 3.1.5.rc1 and 3.1.5 - 3.1.12 and 3.2.0.rc1 and 3.2.0.rc2 and 3.2.0 - 3.2.1 and 3.2.2.rc1 and 3.2.2 and 3.2.3.rc1 and 3.2.3.rc2 and 3.2.3 and 3.2.4.rc1 and 3.2.4 - 3.2.6 and 3.2.7.rc1 and 3.2.7 and 3.2.8.rc1 and 3.2.8.rc2 and 3.2.8 and 3.2.9.rc1 and 3.2.9.rc2 and 3.2.9.rc3 and 3.2.9 - 3.2.12 and 3.2.13.rc1 and 3.2.13.rc2 and 3.2.13 and 3.2.14.rc1 and 3.2.14.rc2 and 3.2.14 and 3.2.15.rc1 and 3.2.15.rc2 and 3.2.15.rc3 and 3.2.15 - 3.2.22 and 3.2.22.1 and 3.2.22.2 and 3.2.22.3 and 3.2.22.4 and 3.2.22.5 and 4.0.0.beta1 and 4.0.0.rc1 and 4.0.0.rc2 and 4.0.0 and 4.0.1.rc1 and 4.0.1.rc2 and 4.0.1.rc3 and 4.0.1.rc4 and 4.0.1 - 4.0.3 and 4.0.4.rc1 and 4.0.4 - 4.0.5 and 4.0.6.rc1 and 4.0.6.rc2 and 4.0.6.rc3 and 4.0.6 - 4.0.9 and 4.0.10.rc1 and 4.0.10.rc2 and 4.0.10 - 4.0.11 and 4.0.11.1 and 4.0.12 and 4.0.13.rc1 and 4.0.13 and 4.1.0.beta1 and 4.1.0.beta2 and 4.1.0.rc1 and 4.1.0.rc2 and 4.1.0 - 4.1.1 and 4.1.2.rc1 and 4.1.2.rc2 and 4.1.2.rc3 and 4.1.2 - 4.1.5 and 4.1.6.rc1 and 4.1.6.rc2 and 4.1.6 - 4.1.7 and 4.1.7.1 and 4.1.8 and 4.1.9.rc1 and 4.1.9 and 4.1.10.rc1 and 4.1.10.rc2 and 4.1.10.rc3 and 4.1.10.rc4 and 4.1.10 - 4.1.11 and 4.1.12.rc1 and 4.1.12 and 4.1.13.rc1 and 4.1.13 and 4.1.14.rc1 and 4.1.14.rc2 and 4.1.14 and 4.1.14.1 and 4.1.14.2 and 4.1.15.rc1 and 4.1.15 and 4.1.16.rc1 and 4.1.16 and 4.2.0.beta1 and 4.2.0.beta2 and 4.2.0.beta3 and 4.2.0.beta4 and 4.2.0.rc1 and 4.2.0.rc2 and 4.2.0.rc3 and 4.2.0 and 4.2.1.rc1 and 4.2.1.rc2 and 4.2.1.rc3 and 4.2.1.rc4 and 4.2.1 - 4.2.2 and 4.2.3.rc1 and 4.2.3 and 4.2.4.rc1 and 4.2.4 and 4.2.5.rc1 and 4.2.5.rc2 and 4.2.5 and 4.2.5.1 and 4.2.5.2 and 4.2.6.rc1 and 4.2.6 and 4.2.7.rc1 and 4.2.7 and 4.2.7.1 and 4.2.8.rc1 and 4.2.8 and 4.2.9.rc1 and 4.2.9.rc2 and 4.2.9 and 4.2.10.rc1 and 4.2.10 - 4.2.11 and 4.2.11.1 and 4.2.11.2 and 4.2.11.3 and 5.0.0.beta1 and 5.0.0.beta1.1 and 5.0.0.beta2 and 5.0.0.beta3 and 5.0.0.beta4 and 5.0.0.racecar1 and 5.0.0.rc1 and 5.0.0.rc2 and 5.0.0 and 5.0.0.1 and 5.0.1.rc1 and 5.0.1.rc2 and 5.0.1 and 5.0.2.rc1 and 5.0.2 - 5.0.3 and 5.0.4.rc1 and 5.0.4 and 5.0.5.rc1 and 5.0.5.rc2 and 5.0.5 and 5.0.6.rc1 and 5.0.6 - 5.0.7 and 5.0.7.1 and 5.0.7.2 and 5.1.0.beta1 and 5.1.0.rc1 and 5.1.0.rc2 and 5.1.0 - 5.1.1 and 5.1.2.rc1 and 5.1.2 and 5.1.3.rc1 and 5.1.3.rc2 and 5.1.3.rc3 and 5.1.3 and 5.1.4.rc1 and 5.1.4 and 5.1.5.rc1 and 5.1.5 - 5.1.6 and 5.1.6.1 and 5.1.6.2 and 5.1.7.rc1 and 5.1.7 and 5.2.0.beta1 and 5.2.0.beta2 and 5.2.0.rc1 and 5.2.0.rc2 and 5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 6.1.7.5 and 6.1.7.6 and 6.1.7.7 and 6.1.7.8 and 6.1.7.9 and 6.1.7.10 and 7.0.0.alpha1 and 7.0.0.alpha2 and 7.0.0.rc1 and 7.0.0.rc2 and 7.0.0.rc3 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 and 7.0.7.1 and 7.0.7.2 and 7.0.8 and 7.0.8.1 and 7.0.8.2 and 7.0.8.3 and 7.0.8.4 and 7.0.8.5 and 7.0.8.6 and 7.0.8.7 and 7.0.9 - 7.0.10 and 7.1.0.beta1 and 7.1.0.rc1 and 7.1.0.rc2 and 7.1.0 - 7.1.3 and 7.1.3.1 and 7.1.3.2 and 7.1.3.3 and 7.1.3.4 and 7.1.4 and 7.1.4.1 and 7.1.4.2 and 7.1.5 and 7.1.5.1 and 7.1.5.2 and 7.1.6 and 7.2.0.beta1 and 7.2.0.beta2 and 7.2.0.beta3 and 7.2.0.rc1 and 7.2.0 - 7.2.1 and 7.2.1.1 and 7.2.1.2 and 7.2.2 and 7.2.2.1 and 7.2.2.2 and 7.2.3 and 8.0.0.beta1 and 8.0.0.rc1 and 8.0.0.rc2 and 8.0.0 and 8.0.0.1 and 8.0.1 - 8.0.2 and 8.0.2.1 and 8.0.3 - 8.0.4 and 8.1.0.beta1 and 8.1.0.rc1 and 8.1.0 - 8.1.2 GHSA-cg4j-q9v8-6v38
Medium Risk
3 years ago
Active Support Possibly Discloses Locally Encrypted Files
5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 GHSA-cr5q-6q9f-rq6q
5.2.0 and 5.2.1.rc1 and 5.2.1 and 5.2.1.1 and 5.2.2.rc1 and 5.2.2 and 5.2.2.1 and 5.2.3.rc1 and 5.2.3 and 5.2.4.rc1 and 5.2.4 and 5.2.4.1 and 5.2.4.2 and 5.2.4.3 and 5.2.4.4 and 5.2.4.5 and 5.2.4.6 and 5.2.5 - 5.2.6 and 5.2.6.1 and 5.2.6.2 and 5.2.6.3 and 5.2.7 and 5.2.7.1 and 5.2.8 and 5.2.8.1 and 6.0.0.beta1 and 6.0.0.beta2 and 6.0.0.beta3 and 6.0.0.rc1 and 6.0.0.rc2 and 6.0.0 and 6.0.1.rc1 and 6.0.1 and 6.0.2.rc1 and 6.0.2.rc2 and 6.0.2 and 6.0.2.1 and 6.0.2.2 and 6.0.3.rc1 and 6.0.3 and 6.0.3.1 and 6.0.3.2 and 6.0.3.3 and 6.0.3.4 and 6.0.3.5 and 6.0.3.6 and 6.0.3.7 and 6.0.4 and 6.0.4.1 and 6.0.4.2 and 6.0.4.3 and 6.0.4.4 and 6.0.4.5 and 6.0.4.6 and 6.0.4.7 and 6.0.4.8 and 6.0.5 and 6.0.5.1 and 6.0.6 and 6.0.6.1 and 6.1.0.rc1 and 6.1.0.rc2 and 6.1.0 - 6.1.2 and 6.1.2.1 and 6.1.3 and 6.1.3.1 and 6.1.3.2 and 6.1.4 and 6.1.4.1 and 6.1.4.2 and 6.1.4.3 and 6.1.4.4 and 6.1.4.5 and 6.1.4.6 and 6.1.4.7 and 6.1.5 and 6.1.5.1 and 6.1.6 and 6.1.6.1 and 6.1.7 and 6.1.7.1 and 6.1.7.2 and 6.1.7.3 and 6.1.7.4 and 7.0.0 - 7.0.2 and 7.0.2.1 and 7.0.2.2 and 7.0.2.3 and 7.0.2.4 and 7.0.3 and 7.0.3.1 and 7.0.4 and 7.0.4.1 and 7.0.4.2 and 7.0.4.3 and 7.0.5 and 7.0.5.1 and 7.0.6 - 7.0.7 GHSA-cr5q-6q9f-rq6q
Impacted packages
Timeline
Published
11 hours ago
November 10, 2026 at 09:27 PM UTC
Fixed (8.1.4.1)
7 days ago
November 04, 2026 at 02:47 AM UTC
Last Modified
11 hours ago
November 10, 2026 at 09:45 PM UTC