CVE security advisories and vulnerability history for actionpack by rails.
46
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
14
Public exploits
PoC or exploit code
5.7
Avg CVSS
2009–2026
Last updated
Overview
rails actionpack has 46 published CVE records since 2009, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 14 have a known public exploit. The average CVSS base score across scored CVEs is 5.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting rails actionpack, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of rails actionpack's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical1
High10
Medium32
Low3
In CISA’s Known Exploited Vulnerabilities catalog
0
None of rails actionpack's CVEs are currently listed in CISA's KEV catalog.
Public exploits
14
14 of rails actionpack's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every rails actionpack version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
3.0.0 <= v < 3.0.43 CVEs
4.0.0 <= v < 4.0.23 CVEs
7.0.0 <= v < 7.0.4.13 CVEs
< 2.3.162 CVEs
2.3.0 <= v < 2.3.132 CVEs
3.0.0 <= v < 3.0.102 CVEs
3.0.0 <= v < 3.2.162 CVEs
3.0.0 <= v < 3.2.172 CVEs
3.0.0 <= v < 3.2.22.22 CVEs
4.0.0 <= v < 4.1.14.12 CVEs
4.0.0 <= v < 4.1.14.22 CVEs
Common weakness types
The CWE weakness categories most often found in rails actionpack CVEs. Follow any weakness for its full explanation.
Common questions about rails actionpack vulnerabilities.
How many CVEs does rails actionpack have?
rails actionpack has 46 published CVE records since 2009.
How many rails actionpack CVEs are in CISA KEV?
None of rails actionpack's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for rails actionpack vulnerabilities?
Yes — 14 of rails actionpack's CVEs have a known public exploit.
Which versions of rails actionpack are affected?
174 distinct rails actionpack versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in rails actionpack CVEs?
rails actionpack's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-264, CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
How many critical rails actionpack vulnerabilities are there?
rails actionpack has 1 critical and 10 high-severity CVEs.
What is the average severity of rails actionpack CVEs?
The average CVSS base score across rails actionpack's scored CVEs is 5.7.
