Skip to content
OpenAdvisories

Package · RubyGems

actionmailer

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.6
    CVE-2024-47889

    Action Mailer has possible ReDoS vulnerability in block_format

    Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the block_format helper in Action Mailer. Carefully crafted tex…

    rails rails rails rails Debian Ubuntu RubyGems
  • Medium —
    CVE-2013-4389

    actionmailer email address processing causes Denial of service

    Multiple format string vulnerabilities in log_subscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled d…

    actionmailer RubyGems