PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
activestorage Active Storage: Possible DoS vulnerability in Active Storage proxy mode via storage errors during streaming Medium Risk 5.3 11 hours ago 11 hours ago
activestorage Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage Medium Risk 5.3 11 hours ago 11 hours ago
activestorage Active Storage: Possible DoS vulnerability in Active Storage filename handling Medium Risk 4.3 11 hours ago 11 hours ago
activestorage Active Storage: Possible arbitrary file read and remote code execution in video previews, analysis and image processing High Risk 8.8 11 hours ago 11 hours ago
activestorage Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing Critical 9.5 3 months ago 2 months ago
activestorage Rails Active Storage has possible Path Traversal in DiskService High Risk 8.0 7 months ago 2 months ago
activestorage Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests Medium Risk 6.5 7 months ago 2 months ago
activestorage Rails Active Storage has possible content type bypass via metadata in direct uploads Medium Risk 6.0 7 months ago 2 months ago
activestorage Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests Medium Risk 6.0 7 months ago 2 months ago
activestorage Rails Active Storage has possible glob injection in its DiskService Medium Risk 6.0 7 months ago 2 months ago
activestorage Rails has possible Sensitive Session Information Leak in Active Storage Medium Risk 5.3 2 years ago 2 months ago
activestorage-redundancy Malicious code in activestorage-redundancy (RubyGems) Unknown 10 months ago 3 months ago
activestorage Possible code injection vulnerability in Rails / Active Storage Critical 9.8 4 years ago 8 months ago
activestorage Active Storage allowed transformation methods that were potentially unsafe Critical 9.5 1 year ago 9 months ago
activestorage Circumvention of file size limits in ActiveStorage High Risk 7.5 6 years ago 2 years ago
activestorage Exposure of Sensitive Information to an Unauthorized Actor in activestorage Medium Risk 6.5 7 years ago 2 years ago
Data courtesy of OSV.dev
Page 1