Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-2098
7.5
HIGHCVSS v2
Published
April 7, 2016
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.
rails
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
RubyGemsRuby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.= 4.0.0, = 4.0.1, = 4.0.2, = 4.0.6, = 4.1.0, = 4.1.9, = 4.1.2, = 4.1.12, = 4.1.10, = 4.2.0, = 4.1.14, = 4.1.13, = 4.1.6, = 4.2.4, = 4.2.3, = 4.2.1, = 4.1.3, = 4.2.5, = 4.1.5, = 4.1.4, = 4.2.5.1, = 4.1.7, = 4.1.1, = 4.0.8, = 4.0.7, = 4.2.2, = 4.1.8, = 4.1.7.1, = 4.0.9, = 4.0.5, = 4.0.10, = 4.0.3, = 4.0.4NVD
rails/rails
GitHubRuby on Rails
GitHubRuby on Rails= 4.0.0, = 4.0.1, = 4.0.2, = 4.0.6, = 4.1.0, = 4.1.9, = 4.1.2, = 4.1.12, = 4.1.10, = 4.2.0, = 4.1.14, = 4.1.13, = 4.1.6, = 4.2.4, = 4.2.3, = 4.2.1, = 4.1.3, = 4.2.5, = 4.1.5, = 4.1.4, = 4.2.5.1, = 4.1.7, = 4.1.1, = 4.0.8, = 4.0.7, = 4.2.2, = 4.1.8, = 4.1.7.1, = 4.0.9, = 4.0.5, = 4.0.10, = 4.0.3, = 4.0.4NVD
NPM
Docker Hub