Ruby on Rails security vulnerabilities
Developer framework / library. Public CVE monitoring for Ruby on Rails. Vendor security advisories are linked on this page.
Built for Operators of this product.
47 public records · 0 security-fix timeline events. 0 published in the last 7 days. 44 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 0
- Medium 0
- Low 0
2026-08-110 issues2026-11-08
Known exploited
View all known exploitedRecently published
Browse catalog- Medium6.6Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.67%Mar 24, 2026
- High8.0Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.58%Mar 24, 2026
- Medium6.6Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.86%Mar 24, 2026
- Medium6.6Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.62%Mar 24, 2026
- Medium5.3Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.40%Mar 24, 2026
- Medium5.3Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.34%Mar 24, 2026
- Medium6.9Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.66%Mar 24, 2026
- Critical9.2# Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by dCheck if you run itEPSS 5.58%Jan 30, 2026
- Medium6.1Action Text brings rich text content and editing to Rails.Check if you run itEPSS 0.43%Jun 4, 2024
- High7.5A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header.Check if you run itEPSS 2.28%Feb 9, 2023