Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

activeadmin

3 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium
Registry
RubyGems

Advisories 3

  • CVE-2024-37031Medium 6.1

    The Active Admin (aka activeadmin) framework before 3.2.2 for Ruby on Rails allows stored XSS in certain situations where users can create…

    Affected: fixed in 3.2.2; from 4.0.0.beta1, fixed in 4.0.0.beta7.

  • In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that…

    Affected: fixed in 2.12.0.

  • csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.

    Affected: fixed in 3.2.0.