漏洞公告

colorscore Command Injection vulnerability

actionpack Path Traversal vulnerability

paperclip Cross-site Scripting vulnerability

actionpack vulnerable to Cross-site Scripting

Web Console (Ruby gem) contains whitelisted_ips bypass

Arbitrary JavaScript Execution in bassmaster

rails-html-sanitizer Cross-site Scripting vulnerability

Potential for Script Injection in syntax-error

Moderate severity vulnerability that affects validator

jquery-rails and jquery-ujs subject to Exposure of Sensitive Information

Aescrypt does not sufficiently use random values

Regular Expression Denial of Service in ms

Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js

sprockets vulnerable to Path Traversal

Directory Traversal in geddy

actionpack vulnerable to Path Traversal

sprout Arbitrary Code Execution vulnerability

Directory traversal vulnerability in Action View in Ruby on Rails

actionview contains Path Traversal vulnerability

ActiveRecord in Ruby on Rails allows database-query bypass

actionview Cross-site Scripting vulnerability

rack-mini-profiler allows remote attackers to obtain sensitive information about allocated strings and objects

jQuery-UI vulnerable to Cross-site Scripting in dialog closeText