https://github.com/rails/rails — Vulnerabilities & Security Advisories 30

This page provides vulnerability aggregation data for the Ruby on Rails framework, a popular open-source web application development tool. It collects reported security weaknesses affecting the Rails framework and its associated components, covering historical data and recent updates. Here, you can track vendor advisories from the Ruby on Rails team, understand specific weakness classes related to web application security, and look up the product’s vulnerability history. The information includes details on various Common Weakness Enumeration (CWE) categories, such as cross-site scripting, SQL injection, and remote code execution, which have been identified in the framework over time. This resource is intended for developers, security researchers, and system administrators seeking to assess the risk profile of the Rails framework. By reviewing the aggregated data, users can better understand the evolution of security issues within the product ecosystem. The page serves as a reference point for identifying patterns in reported vulnerabilities and evaluating the effectiveness of past security patches. It does not include real-time alerting or automated remediation suggestions, focusing instead on historical context and detailed descriptions of known issues. Readers can use this information to inform their security assessments and update their frameworks accordingly.