# cve.now: Rails

The newest entries naming Rails as an affected vendor (up to 200), of 68 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-126188](https://cve.now/CVE-2026-126188.md): Active Storage: Possible local file disclosure in Active Storage video previews and analysis (CVSS 3.7)
- [CVE-2026-126186](https://cve.now/CVE-2026-126186.md): Active Storage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing (CVSS 8.8)
- [CVE-2026-126085](https://cve.now/CVE-2026-126085.md): Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage (CVSS 5.3)
- [CVE-2026-126084](https://cve.now/CVE-2026-126084.md): Active Storage: Unsigned Content-Type in Active Storage GCS direct uploads with cache\_control (CVSS 4.7)
- [CVE-2026-126083](https://cve.now/CVE-2026-126083.md): Action Pack: Possible IP spoofing in Action Dispatch RemoteIp (CVSS 7.4)
- [CVE-2026-126082](https://cve.now/CVE-2026-126082.md): Active Storage: Possible arbitrary file write and read in Active Storage image analysis (CVSS 9.8)
- [CVE-2026-126081](https://cve.now/CVE-2026-126081.md): Action Pack: Possible Strong Parameters bypass in Parameters#each\_key (CVSS 7.5)
- [CVE-2026-126080](https://cve.now/CVE-2026-126080.md): Active Support: Possible DoS vulnerability in Active Support safe\_constantize (CVSS 7.5)
- [CVE-2026-126079](https://cve.now/CVE-2026-126079.md): Action View: Possible XSS vulnerability in Action View text helpers (CVSS 6.1)
- [CVE-2026-126078](https://cve.now/CVE-2026-126078.md): Action View: Possible XSS vulnerability in Action View highlight helper (CVSS 6.1)
- [CVE-2026-126077](https://cve.now/CVE-2026-126077.md): Action Pack: Possible sensitive session information leak in Active Storage proxy mode (CVSS 6.8)
- [CVE-2026-126076](https://cve.now/CVE-2026-126076.md): Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStore (CVSS 4.2)
- [CVE-2026-126075](https://cve.now/CVE-2026-126075.md): Active Support: Possible XSS vulnerability in Active Support MessagePack serializer (CVSS 4.7)
- [CVE-2026-126074](https://cve.now/CVE-2026-126074.md): Active Storage: Possible DoS vulnerability in Active Storage filename handling (CVSS 4.3)
- [CVE-2026-126073](https://cve.now/CVE-2026-126073.md): Action Pack: Possible cache poisoning in Action Pack content negotiation (CVSS 4.8)
- [CVE-2026-126072](https://cve.now/CVE-2026-126072.md): Action Pack: Possible DoS vulnerability in Action Controller Live streaming (CVSS 5.9)
- [CVE-2026-126071](https://cve.now/CVE-2026-126071.md): Active Storage: Possible DoS vulnerability in Active Storage proxy mode via storage errors during streaming (CVSS 5.3)
- [CVE-2026-126070](https://cve.now/CVE-2026-126070.md): Action View: Possible XSS vulnerability in Action View strip\_tags (CVSS 6.1)
- [CVE-2026-126069](https://cve.now/CVE-2026-126069.md): Action View: Possible XSS vulnerability in Action View tag helpers (CVSS 4.7)
- [CVE-2026-126068](https://cve.now/CVE-2026-126068.md): Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress (CVSS 3.7)
- [CVE-2026-126067](https://cve.now/CVE-2026-126067.md): Action Pack: Missing SameSite attribute on session cookies from Action Pack session stores (CVSS 3.1)
- [CVE-2026-73648](https://cve.now/CVE-2026-73648.md): rails-html-sanitizer: Possible XSS vulnerability with certain configurations (CVSS 5.1)
- [CVE-2026-66066](https://cve.now/CVE-2026-66066.md): Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing (CVSS 9.5)
- [CVE-2026-33658](https://cve.now/CVE-2026-33658.md): Rails Active Storage has a possible DoS vulnerability in proxy mode via multi-range requests (CVSS 2.3)
- [CVE-2026-33202](https://cve.now/CVE-2026-33202.md): Rails Active Storage has possible glob injection in its DiskService (CVSS 6.6)
- [CVE-2026-33195](https://cve.now/CVE-2026-33195.md): Rails Active Storage has possible Path Traversal in DiskService (CVSS 8.0)
- [CVE-2026-33176](https://cve.now/CVE-2026-33176.md): Rails Active Support has a possible DoS vulnerability in its number helpers (CVSS 6.6)
- [CVE-2026-33174](https://cve.now/CVE-2026-33174.md): Rails Active Storage has a possible DoS vulnerability when in proxy mode via Range requests (CVSS 6.6)
- [CVE-2026-33173](https://cve.now/CVE-2026-33173.md): Rails Active Storage has possible content type bypass via metadata in direct uploads (CVSS 5.3)
- [CVE-2026-33170](https://cve.now/CVE-2026-33170.md): Rails Active Support has a possible XSS vulnerability in SafeBuffer#% (CVSS 5.3)
- [CVE-2026-33169](https://cve.now/CVE-2026-33169.md): Rails Active Support has a possible ReDoS vulnerability in number\_to\_delimited (CVSS 6.9)
- [CVE-2026-33168](https://cve.now/CVE-2026-33168.md): Rails has a possible XSS vulnerability in its Action View tag helpers (CVSS 2.3)
- [CVE-2026-33167](https://cve.now/CVE-2026-33167.md): Rails has a possible XSS vulnerability in its Action Pack debug exceptions (CVSS 1.3)
- [CVE-2025-24293](https://cve.now/CVE-2025-24293.md): # Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image (CVSS 9.2)
- [CVE-2025-55193](https://cve.now/CVE-2025-55193.md): Active Record logging vulnerable to ANSI escape injection (CVSS 2.7)
- [CVE-2023-23913](https://cve.now/CVE-2023-23913.md): There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are as (CVSS 6.3)
- [CVE-2023-27531](https://cve.now/CVE-2023-27531.md): There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code (CVSS 5.3)
- [CVE-2023-27539](https://cve.now/CVE-2023-27539.md): There is a denial of service vulnerability in the header parsing component of Rack. (CVSS 5.3)
- [CVE-2023-28362](https://cve.now/CVE-2023-28362.md): The redirect\_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value. (CVSS 4.0)
- [CVE-2023-38037](https://cve.now/CVE-2023-38037.md): ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. (CVSS 5.5)
- [CVE-2023-28120](https://cve.now/CVE-2023-28120.md): There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input. (CVSS 5.3)
- [CVE-2024-54133](https://cve.now/CVE-2024-54133.md): Possible Content Security Policy bypass in Action Dispatch (CVSS 2.3)
- [CVE-2024-53985](https://cve.now/CVE-2024-53985.md): Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 2.3)
- [CVE-2024-53987](https://cve.now/CVE-2024-53987.md): Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 2.3)
- [CVE-2024-53986](https://cve.now/CVE-2024-53986.md): Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 2.3)
- [CVE-2024-53988](https://cve.now/CVE-2024-53988.md): Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 2.3)
- [CVE-2024-53989](https://cve.now/CVE-2024-53989.md): Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0 (CVSS 2.3)
- [CVE-2024-47889](https://cve.now/CVE-2024-47889.md): Action Mailer has possible ReDoS vulnerability in block\_format (CVSS 6.6)
- [CVE-2024-47888](https://cve.now/CVE-2024-47888.md): Action Text has possible ReDoS vulnerability in plain\_text\_for\_blockquote\_node (CVSS 6.6)
- [CVE-2024-47887](https://cve.now/CVE-2024-47887.md): Action Controller has possible ReDoS vulnerability in HTTP Token authentication (CVSS 6.6)
- [CVE-2024-41128](https://cve.now/CVE-2024-41128.md): Action Dispatch has possible ReDoS vulnerability in query parameter filtering (CVSS 6.6)
- [CVE-2024-32464](https://cve.now/CVE-2024-32464.md): ActionText ContentAttachment can Contain Unsanitized HTML (CVSS 6.1)
- [CVE-2024-28103](https://cve.now/CVE-2024-28103.md): Action Pack is missing security headers on non-HTML responses (CVSS 5.4)
- [CVE-2024-26144](https://cve.now/CVE-2024-26144.md): Possible Sensitive Session Information Leak in Active Storage (CVSS 5.3)
- [CVE-2024-26143](https://cve.now/CVE-2024-26143.md): Rails Possible XSS Vulnerability in Action Controller (CVSS 6.1)
- [CVE-2024-26142](https://cve.now/CVE-2024-26142.md): Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch (CVSS 7.5)
- [CVE-2022-23520](https://cve.now/CVE-2022-23520.md): rails-html-sanitizer contains an incomplete fix for an XSS vulnerability (CVSS 6.1)
- [CVE-2022-23519](https://cve.now/CVE-2022-23519.md): Possible XSS vulnerability with certain configurations of rails-html-sanitizer (CVSS 7.2)
- [CVE-2022-23518](https://cve.now/CVE-2022-23518.md): Improper neutralization of data URIs allows XSS in rails-html-sanitizer (CVSS 6.1)
- [CVE-2022-23517](https://cve.now/CVE-2022-23517.md): Inefficient Regular Expression Complexity in rails-html-sanitizer (CVSS 7.5)
- [CVE-2022-23633](https://cve.now/CVE-2022-23633.md): Exposure of sensitive information in Action Pack (CVSS 7.4)
- [CVE-2020-15169](https://cve.now/CVE-2020-15169.md): XSS in Action View (CVSS 5.4)
- [CVE-2020-5267](https://cve.now/CVE-2020-5267.md): Possible XSS vulnerability in ActionView (CVSS 4.0)
- [CVE-2010-3299](https://cve.now/CVE-2010-3299.md): The encrypt/decrypt functions in Ruby on Rails 2.3 are vulnerable to padding oracle attacks. (no CVSS)
- [CVE-2019-5420](https://cve.now/CVE-2019-5420.md): A remote code execution vulnerability in development mode Rails \<5.2.2.1, \<6.0.0.beta3 can allow an attacker to guess the automatically gene (no CVSS)
- [CVE-2019-5419](https://cve.now/CVE-2019-5419.md): There is a possible denial of service vulnerability in Action View (Rails) \<5.2.2.1, \<5.1.6.2, \<5.0.7.2, \<4.2.11.1 where specially crafted a (no CVSS)
- [CVE-2019-5418](https://cve.now/CVE-2019-5418.md): There is a File Content Disclosure vulnerability in Action View \<5.2.2.1, \<5.1.6.2, \<5.0.7.2, \<4.2.11.1 and v3 where specially crafted accep (CVSS 7.5, KEV)
- [CVE-2018-3741](https://cve.now/CVE-2018-3741.md): There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/rails
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.