Skip to content
OpenAdvisories

Product · rails

actionpack

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.3
    CVE-2026-33167

    Rails has a possible XSS vulnerability in its Action Pack debug exceptions

    Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary …

    rails actionpack actionpack rails Ubuntu Wolfi RubyGems