Whoops, I couldn't find that page - RubySec

You may want to try a search above, or [visit the homepage](/). Also, here are some recent posts:

Nov 04

GHSA-x6mj-8jx9-qhqv (actionpack): Possible sensitive session information leak in Active Storage proxy mode

posted in •

Nov 04

GHSA-wm3x-v3qw-4jh3 (actionpack): Possible Strong Parameters bypass in Parameters#each_key in Action Pack

posted in •

Nov 04

GHSA-v924-7rp8-4mxh (activestorage): Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing

posted in •

Nov 04

GHSA-v6rj-xm57-3p59 (actionview): Possible XSS vulnerability in Action View highlight helper

posted in •

Nov 04

GHSA-rwvh-fw6r-pwvp (actionpack): Possible DoS vulnerability in Action Controller Live streaming

posted in •

Nov 04

GHSA-rq8q-p985-fjq7 (actionview): Possible XSS vulnerability in Action View strip_tags

posted in •

Nov 04

GHSA-r9jg-fmfx-2gv6 (actionpack): Possible cache poisoning in Action Pack content negotiation

posted in •

Nov 04

GHSA-p2pm-g2h6-7j5j (activestorage): Possible DoS vulnerability in Active Storage filename handling

posted in •

Nov 04

GHSA-hfr4-8rjc-97m2 (activestorage): Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage

posted in •

Nov 04

GHSA-gmj8-hvj3-49mw (actionpack): Missing SameSite attribute on session cookies from Action Pack session stores

posted in •