How many Rails actionmailer CVEs are in CISA KEV?

None of Rails actionmailer's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Rails actionmailer vulnerabilities?

Yes — 1 of Rails actionmailer's CVEs have a known public exploit.

Which versions of Rails actionmailer are affected?

10 distinct Rails actionmailer versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Rails actionmailer CVEs?

Rails actionmailer's CVEs most often map to these CWE weakness types: CWE-1333 (Inefficient Regular Expression Complexity), CWE-134 (Use of Externally-Controlled Format String).

What is the average severity of Rails actionmailer CVEs?

The average CVSS base score across Rails actionmailer's scored CVEs is 5.5.

Rails actionmailer Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Rails actionmailer vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

Rails actionmailer has 2 published CVE records since 2013, of which none are in CISA's KEV catalog and 1 has a known public exploit. The average CVSS base score across scored CVEs is 5.5.

Severity and exploitation

How the CVSS severity of Rails actionmailer's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Rails actionmailer's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Rails actionmailer's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Rails actionmailer version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

3.0.0 <= v < 3.2.151 CVE
3.0.0 <= v < 6.1.7.91 CVE
7.0.0 <= v < 7.0.8.51 CVE
7.1.0 <= v < 7.1.4.11 CVE
7.2.0 <= v < 7.2.1.11 CVE

Fixed in

3.2.151 CVE
6.1.7.91 CVE
7.0.8.51 CVE
7.1.4.1

Common weakness types

The CWE weakness categories most often found in Rails actionmailer CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Rails actionmailer CVEs were published each year.

2013

2014

2015

2016

2017

2018

2019

Other Rails products

Browse vulnerabilities for other products by Rails.

rails110 CVEs actionpack46 CVEs activerecord15 CVEs rails-html-sanitizer15 CVEs ActiveSupport13 CVEs activestorage9 CVEs actionview8 CVEs https://github.com/rails/rails

Frequently asked questions

Common questions about Rails actionmailer vulnerabilities.

How many CVEs does Rails actionmailer have?: Rails actionmailer has 2 published CVE records since 2013.
How many Rails actionmailer CVEs are in CISA KEV?: None of Rails actionmailer's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Rails actionmailer vulnerabilities?: Yes — 1 of Rails actionmailer's CVEs have a known public exploit.
Which versions of Rails actionmailer are affected?: 10 distinct Rails actionmailer versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Rails actionmailer CVEs?: Rails actionmailer's CVEs most often map to these CWE weakness types: CWE-1333 (Inefficient Regular Expression Complexity), CWE-134 (Use of Externally-Controlled Format String).
What is the average severity of Rails actionmailer CVEs?: The average CVSS base score across Rails actionmailer's scored CVEs is 5.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Rails actionmailer vulnerabilities

Get an alert for each new Rails actionmailer CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Frequently asked questions

Common questions about Rails actionmailer vulnerabilities.

How many CVEs does Rails actionmailer have?: Rails actionmailer has 2 published CVE records since 2013.
How many Rails actionmailer CVEs are in CISA KEV?: None of Rails actionmailer's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Rails actionmailer vulnerabilities?: Yes — 1 of Rails actionmailer's CVEs have a known public exploit.
Which versions of Rails actionmailer are affected?: 10 distinct Rails actionmailer versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Rails actionmailer CVEs?: Rails actionmailer's CVEs most often map to these CWE weakness types: CWE-1333 (Inefficient Regular Expression Complexity), CWE-134 (Use of Externally-Controlled Format String).
What is the average severity of Rails actionmailer CVEs?: The average CVSS base score across Rails actionmailer's scored CVEs is 5.5.

Affected versions and CVEs

Browse every Rails actionmailer version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

3.0.0 <= v < 3.2.151 CVE
3.0.0 <= v < 6.1.7.91 CVE
7.0.0 <= v < 7.0.8.51 CVE
7.1.0 <= v < 7.1.4.11 CVE
7.2.0 <= v < 7.2.1.11 CVE

Fixed in

3.2.151 CVE
6.1.7.91 CVE
7.0.8.51 CVE
7.1.4.1

Find a version

2 CVEs

Sort

Action Mailer has possible ReDoS vulnerability in block_format
CVE-2024-47889
Patch
Workaround
CWE-1333
Medium · CVSS 6.6
EPSS 0.9% (61th pct)2024-10-16
actionmailer email address processing causes Denial of service
CVE-2013-4389
Public exploit
Patch
CWE-134
Medium · CVSS 4.3
EPSS 3.1% (88th pct)2013-10-17