Ruby on Rails security incidents

Recent advisories touching Ruby on Rails apps — searchable, enriched with exploit probability and affected versions.

Rails Ruby on Rails Path Traversal Vulnerability

https://web.archive.org/web/20190313201629/https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/ ; https://nvd.nist.gov/vuln/detail/CVE-2019-5418

1 year agoEPSS 99%

CRITICALExploitedunknown

Ruby on Rails Directory Traversal Vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2016-0752

4 years agoEPSS 96%

CRITICALExploitedunknown

Ruby on Rails Directory Traversal Vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2014-0130

4 years agoEPSS 54%

Tooling for Ruby on Rails

Snyk — Scan your dependencies in CI and fix this vulnerability.→Socket — Detect malicious and compromised packages before they ship.→

Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.