| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2023-22796 | rubygem-activesupport 安全漏洞 | - | https://github.com/rails/rails | 高危 | - | 2023-02-09 00:00:00 | Deep Dive |
| CVE-2023-22795 | actionpack 安全漏洞 | - | https://github.com/rails/rails | 高危 | - | 2023-02-09 00:00:00 | Deep Dive |
| CVE-2023-22794 | rubygem-activerecord SQL注入漏洞 | - | https://github.com/rails/rails | 高危 | - | 2023-02-09 00:00:00 | Deep Dive |
| CVE-2023-22792 | rubygem-actionpack 安全漏洞 | - | https://github.com/rails/rails | 高危 | - | 2023-02-09 00:00:00 | Deep Dive |
| CVE-2014-125033 | rails-cv-app uploaded_files_controller.rb path traversal | - | rails-cv-app | Low | 3.5 | 2023-01-02 07:51:16 | Deep Dive |
| CVE-2022-23520 | rails-html-sanitizer contains an incomplete fix for an XSS vulnerability | rails | rails-html-sanitizer | Medium | 6.1 | 2022-12-14 17:07:32 | Deep Dive |
| CVE-2022-23519 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | rails | rails-html-sanitizer | High | 7.2 | 2022-12-14 16:50:15 | Deep Dive |
| CVE-2022-23518 | Improper neutralization of data URIs allows XSS in rails-html-sanitizer | rails | rails-html-sanitizer | 中危 | - | 2022-12-14 16:22:34 | Deep Dive |
| CVE-2022-23517 | Inefficient Regular Expression Complexity in rails-html-sanitizer | rails | rails-html-sanitizer | High | 7.5 | 2022-12-14 16:10:22 | Deep Dive |
| CVE-2022-32224 | Rails 代码问题漏洞 | - | https://github.com/rails/rails | 超危 | - | 2022-12-05 00:00:00 | Deep Dive |
| CVE-2022-3704 | Ruby on Rails _table.html.erb cross site scripting | unspecified | Ruby on Rails | Low | 3.5 | 2022-10-26 00:00:00 | Deep Dive |
| CVE-2022-32209 | Rails 跨站脚本漏洞 | - | https://github.com/rails/rails-html-sanitizer | 中危 | - | 2022-06-24 00:00:00 | Deep Dive |
| CVE-2022-22577 | Rails Action Pack 跨站脚本漏洞 | - | https://github.com/rails/rails | 中危 | - | 2022-05-26 00:00:00 | Deep Dive |
| CVE-2022-21831 | Ruby on Rails 代码注入漏洞 | - | https://github.com/rails/rails | 超危 | - | 2022-05-26 00:00:00 | Deep Dive |
| CVE-2022-27777 | Action View tag helpers 跨站脚本漏洞 | - | https://github.com/rails/rails | 中危 | - | 2022-05-26 00:00:00 | Deep Dive |
| CVE-2022-23633 | Exposure of sensitive information in Action Pack | rails | rails | High | 7.4 | 2022-02-11 00:00:00 | Deep Dive |
| CVE-2021-44528 | Rails Action Pack 输入验证错误漏洞 | - | https://github.com/rails/rails | 中危 | - | 2022-01-07 00:00:00 | Deep Dive |
| CVE-2011-1497 | Rails 跨站脚本漏洞 | - | rails | 中危 | - | 2021-10-19 13:29:55 | Deep Dive |
| CVE-2021-22942 | Ruby on Rails 输入验证错误漏洞 | - | https://github.com/rails/rails | 中危 | - | 2021-10-18 00:00:00 | Deep Dive |
| CVE-2021-22904 | Ruby 安全漏洞 | - | https://github.com/rails/rails | 高危 | - | 2021-06-11 15:49:38 | Deep Dive |