How many rails activerecord CVEs are in CISA KEV?

None of rails activerecord's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of rails activerecord are affected?

67 distinct rails activerecord versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in rails activerecord CVEs?

rails activerecord's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-20 (Improper Input Validation), CWE-400 (Uncontrolled Resource Consumption), CWE-150 (Improper Neutralization of Escape, Meta, or Control Sequences).

How many critical rails activerecord vulnerabilities are there?

rails activerecord has 3 critical and 9 high-severity CVEs.

What is the average severity of rails activerecord CVEs?

The average CVSS base score across rails activerecord's scored CVEs is 7.8.

rails activerecord Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: rails activerecord vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

rails activerecord Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

rails activerecord has 15 published CVE records since 2008, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting rails activerecord, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of rails activerecord's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High9

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of rails activerecord's CVEs are currently listed in CISA's KEV catalog.

Public exploits

8 of rails activerecord's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every rails activerecord version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 2.3.152 CVEs
7.0.0 <= v < 7.0.4.12 CVEs
< 2.1.11 CVE
< 2.3.171 CVE
< 4.2.01 CVE
< 5.2.8.11 CVE
< 6.1.7.11 CVE
< 7.1.5.21 CVE
2.0.0 <= v < 2.3.131 CVE
2.0.0 <= v < 3.2.191 CVE
2.3.9 <= v < 2.3.101 CVE
3.0.0 <= v < 3.0.11 CVE

Common weakness types

The CWE weakness categories most often found in rails activerecord CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many rails activerecord CVEs were published each year.

2008

2010

2011

2012

2013

2014

2021

Other rails products

Browse vulnerabilities for other products by rails.

rails109 CVEs actionpack46 CVEs rails-html-sanitizer15 CVEs activesupport13 CVEs activestorage9 CVEs actionview8 CVEs https://github.com/rails/rails3 CVEs actionmailer2 CVEs

Frequently asked questions

Common questions about rails activerecord vulnerabilities.

How many CVEs does rails activerecord have?: rails activerecord has 15 published CVE records since 2008.
How many rails activerecord CVEs are in CISA KEV?: None of rails activerecord's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for rails activerecord vulnerabilities?: Yes — 8 of rails activerecord's CVEs have a known public exploit.
Which versions of rails activerecord are affected?: 67 distinct rails activerecord versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in rails activerecord CVEs?: rails activerecord's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-20 (Improper Input Validation), CWE-400 (Uncontrolled Resource Consumption), CWE-150 (Improper Neutralization of Escape, Meta, or Control Sequences).
How many critical rails activerecord vulnerabilities are there?: rails activerecord has 3 critical and 9 high-severity CVEs.
What is the average severity of rails activerecord CVEs?: The average CVSS base score across rails activerecord's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track rails activerecord vulnerabilities

Monitor new rails activerecord vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing