Skip to content
OpenAdvisories
Unscored DSA-2982-1 2 CVEs

ruby-activerecord-3.2 - security update

Published Jul 19, 2014 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 ruby-activerecord-3.2 3.2.6-5+deb7u1

Vulnerabilities 2

  • High —
    CVE-2014-3482

    SQL Injection in Active Record

    SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql_adapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leverag…

    rails activerecord Debian RubyGems
  • High —
    CVE-2014-3483

    Active Record contains SQL Injection via improper range quoting

    SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/quoting.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 4.x before 4.0.7 and 4.1.x before 4.1.3 allows remote attackers to execute arbitrary SQL comma…

    rails activerecord Debian RubyGems