Rails ActiveSupport

• CVE-2026-33176 Medium 6.6 Rails Active Support has a possible DoS vulnerability in its number helpers 0.9%
• CVE-2026-33170 Medium 5.3 Rails Active Support has a possible XSS vulnerability in SafeBuffer#% 0.3%
• CVE-2026-33169 Medium 6.9 Rails Active Support has a possible ReDoS vulnerability in number_to_delimited 0.7%
• CVE-2023-38037 Medium 5.5 ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current `umask` settings, meaning that it's pos 0.3%
• CVE-2023-28120 Medium 5.3 There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input. 0.9%