How many rubyonrails rails CVEs are in CISA KEV?

Yes — 3 of rubyonrails rails's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of rubyonrails rails are affected?

280 distinct rubyonrails rails versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in rubyonrails rails CVEs?

rubyonrails rails's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

How many critical rubyonrails rails vulnerabilities are there?

rubyonrails rails has 5 critical and 37 high-severity CVEs.

What is the average severity of rubyonrails rails CVEs?

The average CVSS base score across rubyonrails rails's scored CVEs is 6.2.

rubyonrails rails Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: rubyonrails rails vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

rubyonrails rails Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

rubyonrails rails has 124 published CVE records since 2006, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 15 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting rubyonrails rails, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include ruby.

Severity and exploitation

How the CVSS severity of rubyonrails rails's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High37

Medium79

Low3

In CISA’s Known Exploited Vulnerabilities catalog

3 of rubyonrails rails's CVEs are confirmed exploited in the wild.

Public exploits

15 of rubyonrails rails's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every rubyonrails rails version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

3.0.0 <= v <= 3.0.039 CVEs
3.0.1 <= v <= 3.0.137 CVEs
3.0.2 <= v <= 3.0.237 CVEs
3.0.3 <= v <= 3.0.337 CVEs
3.0.4 <= v <= 3.0.437 CVEs
3.1.0 <= v <= 3.1.035 CVEs
3.0.5 <= v <= 3.0.534 CVEs
3.0.6 <= v <= 3.0.633 CVEs
3.0.7 <= v <= 3.0.733 CVEs
3.0.8 <= v <= 3.0.833 CVEs
3.0.10 <= v <= 3.0.1032 CVEs

Common weakness types

The CWE weakness categories most often found in rubyonrails rails CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many rubyonrails rails CVEs were published each year.

2014

2015

2016

2017

2018

2019

2020

Other rubyonrails products

Browse vulnerabilities for other products by rubyonrails.

ruby on rails53 CVEs rails html sanitizers10 CVEs html sanitizer4 CVEs actionpack2 CVEs actionpack page-caching2 CVEs Action View1 CVEs actionview1 CVEs active record session store

Frequently asked questions

Common questions about rubyonrails rails vulnerabilities.

How many CVEs does rubyonrails rails have?: rubyonrails rails has 124 published CVE records since 2006.
How many rubyonrails rails CVEs are in CISA KEV?: Yes — 3 of rubyonrails rails's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for rubyonrails rails vulnerabilities?: Yes — 15 of rubyonrails rails's CVEs have a known public exploit.
Which versions of rubyonrails rails are affected?: 280 distinct rubyonrails rails versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in rubyonrails rails CVEs?: rubyonrails rails's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
How many critical rubyonrails rails vulnerabilities are there?: rubyonrails rails has 5 critical and 37 high-severity CVEs.
What is the average severity of rubyonrails rails CVEs?: The average CVSS base score across rubyonrails rails's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track rubyonrails rails vulnerabilities

Monitor new rubyonrails rails vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing