Rails vulnerabilities
68 CVEs and advisories name Rails as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-33169Rails Active Support has a possible ReDoS vulnerability in number_to_delimited
- CVE-2026-33168Rails has a possible XSS vulnerability in its Action View tag helpers
- CVE-2026-33167Rails has a possible XSS vulnerability in its Action Pack debug exceptions
- CVE-2025-24293# Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image
- CVE-2025-55193Active Record logging vulnerable to ANSI escape injection
- CVE-2023-23913There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are as
- CVE-2023-27531There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code
- CVE-2023-27539There is a denial of service vulnerability in the header parsing component of Rack.
- CVE-2023-28362The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value.
- CVE-2023-38037ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file.
- CVE-2023-28120There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input.
- CVE-2024-54133Possible Content Security Policy bypass in Action Dispatch
- CVE-2024-53985Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-53987Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-53986Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-53988Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-53989Possible XSS vulnerability with certain configurations of rails-html-sanitizer 1.6.0
- CVE-2024-47889Action Mailer has possible ReDoS vulnerability in block_format
- CVE-2024-47888Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node
- CVE-2024-47887Action Controller has possible ReDoS vulnerability in HTTP Token authentication
- CVE-2024-41128Action Dispatch has possible ReDoS vulnerability in query parameter filtering
- CVE-2024-32464ActionText ContentAttachment can Contain Unsanitized HTML
- CVE-2024-28103Action Pack is missing security headers on non-HTML responses
- CVE-2024-26144Possible Sensitive Session Information Leak in Active Storage
- CVE-2024-26143Rails Possible XSS Vulnerability in Action Controller
- CVE-2024-26142Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch
- CVE-2022-23520rails-html-sanitizer contains an incomplete fix for an XSS vulnerability
- CVE-2022-23519Possible XSS vulnerability with certain configurations of rails-html-sanitizer
- CVE-2022-23518Improper neutralization of data URIs allows XSS in rails-html-sanitizer
- CVE-2022-23517Inefficient Regular Expression Complexity in rails-html-sanitizer