Skip to content
OpenAdvisories
Medium DSA-3651-1 1 CVE

rails - security update

Published Aug 25, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 rails 2:4.1.8-1+deb8u4

Vulnerabilities 1

  • Medium 6.1
    CVE-2016-6316

    actionview Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute…

    rails actionview Debian RubyGems