Rails rails

• CVE-2026-66066 Critical 9.5 Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing 30.1%
• CVE-2025-55193 Low 2.7 Active Record logging vulnerable to ANSI escape injection 0.6%
• CVE-2024-54133 Low 2.3 Possible Content Security Policy bypass in Action Dispatch 1.0%
• CVE-2024-47889 Medium 6.6 Action Mailer has possible ReDoS vulnerability in block_format 0.9%
• CVE-2024-47888 Medium 6.6 Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node 1.0%
• CVE-2024-47887 Medium 6.6 Action Controller has possible ReDoS vulnerability in HTTP Token authentication 1.0%
• CVE-2024-41128 Medium 6.6 Action Dispatch has possible ReDoS vulnerability in query parameter filtering 1.1%
• CVE-2024-32464 Medium 6.1 ActionText ContentAttachment can Contain Unsanitized HTML 0.4%
• CVE-2024-28103 Medium 5.4 Action Pack is missing security headers on non-HTML responses 0.7%
• CVE-2024-26144 Medium 5.3 Possible Sensitive Session Information Leak in Active Storage 1.2%
• CVE-2024-26143 Medium 6.1 Rails Possible XSS Vulnerability in Action Controller 1.0%
• CVE-2024-26142 High 7.5 Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch 1.5%
• CVE-2022-23633 High 7.4 Exposure of sensitive information in Action Pack 2.2%