Skip to content
OpenAdvisories
High 1 exploited CVE DLA-1739-1 2 CVEs

rails - security update

Published Mar 30, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 rails 2:4.1.8-1+deb8u5

Vulnerabilities 2

  • High 7.5
    CVE-2019-5418 Exploited Public exploit Scanner template EPSS 99%

    Path Traversal in Action View

    There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

    rails https://github.com/rails/rails rails rails Debian Ubuntu RubyGems
    KEV Jul 7, 2025
  • High 7.5
    CVE-2019-5419

    Denial of Service Vulnerability in Action View

    There is a possible denial of service vulnerability in Action View (Rails) <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 where specially crafted accept headers can cause action view to consume 100% cpu and make the server unresponsive.

    rails https://github.com/rails/rails rails rails Debian Ubuntu RubyGems