Skip to content
OpenAdvisories

Product · rails

actionview

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-33168

    Rails has a possible XSS vulnerability in its Action View tag helpers

    Action View provides conventions and helpers for building web pages with the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a blank string is used as an HTML attribute name in Action View tag helpers, the attribute escaping is bypassed…

    rails actionview rails rails Debian Ubuntu Wolfi RubyGems