Package · Alpine

ruby-activesupport

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.3

CVE-2023-28120

Possible XSS Security Vulnerability in SafeBuffer#bytesplice

There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input.

rails activesupport rails rails Debian Ubuntu Alpine RubyGems

Jan 9, 2025
Low —

CVE-2023-22796

ReDoS based DoS vulnerability in Active Support's underscore

A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process …

rails rails activesupport ruby-activesupport Debian Ubuntu Alpine RubyGems

Feb 9, 2023