Rails ActiveSupport vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 20263

Newest CVEs

• CVE-2026-33176

  Rails Active Support has a possible DoS vulnerability in its number helpers

  rails · activesupport

  Medium6.6
• CVE-2026-33170

  Rails Active Support has a possible XSS vulnerability in SafeBuffer#%

  rails · activesupport

  Medium5.3
• CVE-2026-33169

  Rails Active Support has a possible ReDoS vulnerability in number_to_delimited

  rails · activesupport

  Medium6.9
• CVE-2023-38037

  ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current…

  Rails · ActiveSupport

  Medium5.5
• CVE-2023-28120

  There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input.

  Rails · ActiveSupport

  Medium5.3