Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2011-1497 — MEDIUM severity vulnerability | Release Alert

CVE-2011-1497

6.1

MEDIUMCVSS v3

Published

October 19, 2021

CVSS v2

4.3 MEDIUM

Affected

5 projects

Assigned by

Red Hat

Severity scale

010

Description

A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.

RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.

< 3.0.6NVD

GitHubRuby on Rails

< 3.0.6NVD

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Rails - python web framework

< 3.0.6NVD

NPMRails is a web-application framework that includes everything needed to create database-backed web applications according to the Model-View-Controller (MVC) pattern.

< 3.0.6NVD

Docker HubDEPRECATED; use "ruby" instead

< 3.0.6NVD