Skip to content
OpenAdvisories

Package · RubyGems

activerecord

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2021-22880 Public exploit

    Active Record subject to Regular Expression Denial-of-Service (ReDoS)

    The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active …

    rails rails activerecord Debian Ubuntu RubyGems
  • High 7.5
    CVE-2016-6317 Public exploit

    ActiveRecord in Ruby on Rails allows database-query bypass

    Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and …

    rails activerecord Debian RubyGems