Skip to content
OpenAdvisories

Package · Ubuntu

ruby-pagy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-54659

    Pagy I18n locale option is not validated before being used in a file path

    Pagy is agnostic pagination in plain Ruby. From 43.0.0 until 43.5.6, Pagy::I18n.locale= in gem/lib/pagy/modules/i18n/i18n.rb stored locale values verbatim and later used them as <locale>.yml path components, allowing untrusted params[:locale] values with abso…

    ddnexus pagy pagy ruby-pagy Ubuntu RubyGems