How many CVEs does activerecord project have?

activerecord project has 3 published CVE records since 2022, including 0 in the last two years.

How many activerecord project CVEs are in CISA KEV?

None of activerecord project's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which activerecord project products have the most CVEs?

The activerecord project products with the most published CVEs are activerecord.

What are the most common weakness types in activerecord project CVEs?

activerecord project's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-502 (Deserialization of Untrusted Data), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

Are there public exploits for activerecord project vulnerabilities?

Yes — 2 of activerecord project's CVEs have a known public exploit.

How many critical activerecord project vulnerabilities are there?

activerecord project has 1 critical and 2 high-severity CVEs.

What is the average severity of activerecord project CVEs?

The average CVSS base score across activerecord project's scored CVEs is 8.7.

activerecord project Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 8.7
Critical / high: 100%
Actively exploited (KEV): 0%
Public exploit available: 67%
Patch available: 100%

activerecord project Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Disclosure activity by year

Latest activerecord project CVEs

Other vendors

Frequently asked questions

References

Track activerecord project vulnerabilities