Ruby/rails/3.0.0.beta
Ruby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
https://rubygems.org/gems/rails
UNKNOWN
2 Security Vulnerabilities
Cross site scripting in rails
Published date: 2022-04-22T00:24:28Z
CVE: CVE-2011-1497
Links:
- https://nvd.nist.gov/vuln/detail/CVE-2011-1497
- https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG
- https://www.openwall.com/lists/oss-security/2011/04/06/13
- https://github.com/advisories/GHSA-q58j-fmvf-9rq6
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-1497.yml
A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
Affected versions:
["3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0", "3.0.0.rc2", "3.0.0.rc", "3.0.0.beta4", "3.0.0.beta3", "3.0.0.beta2", "3.0.0.beta", "2.3.18", "2.3.17", "2.3.16", "2.3.15", "2.3.14", "2.3.12", "2.3.11", "2.3.10", "2.3.9", "2.3.9.pre", "2.3.8", "2.3.8.pre1", "2.3.7", "2.3.6", "2.3.5", "2.3.4", "2.3.3", "2.3.2", "2.2.3", "2.2.2", "2.1.2", "2.1.1", "2.1.0", "2.0.5", "2.0.4", "2.0.2", "2.0.1", "2.0.0", "1.2.6", "1.2.5", "1.2.4", "1.2.3", "1.2.2", "1.2.1", "1.2.0", "1.1.6", "1.1.5", "1.1.4", "1.1.3", "1.1.2", "1.1.1", "1.1.0", "1.0.0", "0.14.4", "0.14.3", "0.14.2", "0.14.1", "0.13.1", "0.13.0", "0.12.1", "0.12.0", "0.11.1", "0.11.0", "0.10.1", "0.10.0", "0.9.5", "0.9.4.1", "0.9.4", "0.9.3", "0.9.2", "0.9.1", "0.9.0", "0.8.5", "0.8.0"]
Secure versions:
[5.2.0.rc2, 5.2.0.rc1, 5.2.0.beta2, 5.2.0.beta1, 5.1.7, 5.1.7.rc1, 5.1.6.2, 5.1.6.1, 5.1.6, 5.1.5, 5.1.5.rc1, 5.1.4, 5.1.4.rc1, 5.1.3, 5.1.3.rc3, 5.1.3.rc2, 5.1.3.rc1, 5.1.2, 5.1.2.rc1, 5.1.1, 5.1.0, 5.1.0.rc2, 5.1.0.rc1, 5.1.0.beta1, 5.0.7.2, 5.0.7.1, 5.0.7, 5.0.6, 5.0.6.rc1, 5.0.5, 5.0.5.rc2, 5.0.5.rc1, 5.0.4, 5.0.4.rc1, 5.0.3, 5.0.2, 5.0.2.rc1, 5.0.1, 5.0.1.rc2, 5.0.1.rc1, 5.0.0.1, 5.0.0, 5.0.0.rc2, 5.0.0.rc1, 5.0.0.racecar1, 5.0.0.beta4, 5.0.0.beta3, 5.0.0.beta2, 5.0.0.beta1.1, 5.0.0.beta1, 4.2.11.3, 4.2.11.2, 4.2.11.1, 4.2.11, 4.2.10, 4.2.10.rc1, 4.2.9, 4.2.9.rc2, 4.2.9.rc1, 4.2.8, 4.2.8.rc1, 4.2.7.1, 4.2.7, 4.2.7.rc1, 4.2.6, 4.2.6.rc1, 4.2.5.2, 4.2.5.1, 4.2.5, 4.2.5.rc2, 4.2.5.rc1, 4.2.4, 4.2.4.rc1, 4.2.3, 4.2.3.rc1, 4.2.2, 4.2.1, 4.2.1.rc4, 4.2.1.rc3, 4.2.1.rc2, 4.2.1.rc1, 4.2.0, 4.2.0.rc3, 4.2.0.rc2, 4.2.0.rc1, 4.2.0.beta4, 4.2.0.beta3, 4.2.0.beta2, 4.2.0.beta1, 4.1.16, 4.1.16.rc1, 4.1.15, 4.1.15.rc1, 4.1.14.2, 4.1.14.1, 4.1.14, 4.1.14.rc2, 4.1.14.rc1, 4.1.13, 4.1.13.rc1, 4.1.12, 4.1.12.rc1, 4.1.11, 4.1.10, 4.1.10.rc4, 4.1.10.rc3, 4.1.10.rc2, 4.1.10.rc1, 4.1.9, 4.1.9.rc1, 4.1.8, 4.1.7.1, 4.1.7, 4.1.6, 4.1.6.rc2, 4.1.6.rc1, 4.1.5, 4.1.4, 4.1.3, 4.1.2, 4.1.2.rc3, 4.1.2.rc2, 4.1.2.rc1, 4.1.1, 4.1.0, 4.1.0.rc2, 4.1.0.rc1, 4.1.0.beta2, 4.1.0.beta1, 4.0.13, 4.0.13.rc1, 4.0.12, 4.0.11.1, 4.0.11, 4.0.10, 4.0.10.rc2, 4.0.10.rc1, 4.0.9, 4.0.8, 4.0.7, 4.0.6, 4.0.6.rc3, 4.0.6.rc2, 4.0.6.rc1, 4.0.5, 4.0.4, 4.0.4.rc1, 4.0.3, 4.0.0.rc2, 4.0.0.rc1, 4.0.0.beta1, 3.2.22.5, 3.2.22.4, 3.2.22.3, 3.2.22.2, 3.2.22.1, 3.2.22, 3.2.21, 3.2.20, 3.2.19, 3.2.18, 3.2.17, 7.0.0.alpha2, 7.0.0.alpha1, 7.0.0.rc1, 7.0.0.rc3, 7.0.0.rc2, 7.1.0.beta1, 7.1.0.rc1, 7.1.0.rc2, 7.1.3.2, 7.1.3.1, 7.0.8.1, 6.1.7.7, 7.1.3.3, 7.0.8.2, 7.0.8.3, 7.2.0.beta1, 7.2.0.beta2, 7.1.3.4, 7.0.8.4, 6.1.7.8, 7.2.0.beta3, 7.2.0.rc1, 7.2.0, 7.2.1, 7.1.4, 8.0.0.beta1, 7.2.1.1, 7.1.4.1, 7.0.8.5, 6.1.7.9, 8.0.0.rc1, 7.2.1.2, 7.1.4.2, 7.0.8.6, 6.1.7.10]
Recommendation:
Update to version 7.2.1.2.
Rails vulnerable to Cross-site Scripting
Published date: 2017-10-24
CVE: 2014-0081
CVSS V2: 4.3
Multiple cross-site scripting (XSS) vulnerabilities in
actionview/lib/action_view/helpers/number_helper.rb
in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2
allow remote attackers to inject arbitrary web script or HTML via the
(1) format, (2) negativeformat, or (3) units parameter to the
(a) numbertocurrency, (b) numbertopercentage, or (c) numberto_human helper.
Affected versions:
["3.1.12", "3.1.11", "3.1.10", "3.1.9", "3.1.8", "3.1.7", "3.1.6", "3.1.5", "3.1.5.rc1", "3.1.4", "3.1.4.rc1", "3.1.3", "3.1.2", "3.1.2.rc2", "3.1.2.rc1", "3.1.1", "3.1.1.rc3", "3.1.1.rc2", "3.1.1.rc1", "3.1.0", "3.1.0.rc8", "3.1.0.rc6", "3.1.0.rc5", "3.1.0.rc4", "3.1.0.rc3", "3.1.0.rc2", "3.1.0.rc1", "3.1.0.beta1", "3.0.20", "3.0.19", "3.0.18", "3.0.17", "3.0.16", "3.0.15", "3.0.14", "3.0.13", "3.0.13.rc1", "3.0.12", "3.0.12.rc1", "3.0.11", "3.0.10", "3.0.10.rc1", "3.0.9", "3.0.9.rc5", "3.0.9.rc4", "3.0.9.rc3", "3.0.9.rc1", "3.0.8", "3.0.8.rc4", "3.0.8.rc2", "3.0.8.rc1", "3.0.7", "3.0.7.rc2", "3.0.7.rc1", "3.0.6", "3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0", "3.0.0.rc2", "3.0.0.rc", "3.0.0.beta4", "3.0.0.beta3", "3.0.0.beta2", "3.0.0.beta", "2.3.18", "2.3.17", "2.3.16", "2.3.15", "2.3.14", "2.3.12", "2.3.11", "2.3.10", "2.3.9", "2.3.9.pre", "2.3.8", "2.3.8.pre1", "2.3.7", "2.3.6", "2.3.5", "2.3.4", "2.3.3", "2.3.2", "2.2.3", "2.2.2", "2.1.2", "2.1.1", "2.1.0", "2.0.5", "2.0.4", "2.0.2", "2.0.1", "2.0.0", "1.2.6", "1.2.5", "1.2.4", "1.2.3", "1.2.2", "1.2.1", "1.2.0", "1.1.6", "1.1.5", "1.1.4", "1.1.3", "1.1.2", "1.1.1", "1.1.0", "1.0.0", "0.14.4", "0.14.3", "0.14.2", "0.14.1", "0.13.1", "0.13.0", "0.12.1", "0.12.0", "0.11.1", "0.11.0", "0.10.1", "0.10.0", "0.9.5", "0.9.4.1", "0.9.4", "0.9.3", "0.9.2", "0.9.1", "0.9.0", "0.8.5", "0.8.0"]
Secure versions:
[5.2.0.rc2, 5.2.0.rc1, 5.2.0.beta2, 5.2.0.beta1, 5.1.7, 5.1.7.rc1, 5.1.6.2, 5.1.6.1, 5.1.6, 5.1.5, 5.1.5.rc1, 5.1.4, 5.1.4.rc1, 5.1.3, 5.1.3.rc3, 5.1.3.rc2, 5.1.3.rc1, 5.1.2, 5.1.2.rc1, 5.1.1, 5.1.0, 5.1.0.rc2, 5.1.0.rc1, 5.1.0.beta1, 5.0.7.2, 5.0.7.1, 5.0.7, 5.0.6, 5.0.6.rc1, 5.0.5, 5.0.5.rc2, 5.0.5.rc1, 5.0.4, 5.0.4.rc1, 5.0.3, 5.0.2, 5.0.2.rc1, 5.0.1, 5.0.1.rc2, 5.0.1.rc1, 5.0.0.1, 5.0.0, 5.0.0.rc2, 5.0.0.rc1, 5.0.0.racecar1, 5.0.0.beta4, 5.0.0.beta3, 5.0.0.beta2, 5.0.0.beta1.1, 5.0.0.beta1, 4.2.11.3, 4.2.11.2, 4.2.11.1, 4.2.11, 4.2.10, 4.2.10.rc1, 4.2.9, 4.2.9.rc2, 4.2.9.rc1, 4.2.8, 4.2.8.rc1, 4.2.7.1, 4.2.7, 4.2.7.rc1, 4.2.6, 4.2.6.rc1, 4.2.5.2, 4.2.5.1, 4.2.5, 4.2.5.rc2, 4.2.5.rc1, 4.2.4, 4.2.4.rc1, 4.2.3, 4.2.3.rc1, 4.2.2, 4.2.1, 4.2.1.rc4, 4.2.1.rc3, 4.2.1.rc2, 4.2.1.rc1, 4.2.0, 4.2.0.rc3, 4.2.0.rc2, 4.2.0.rc1, 4.2.0.beta4, 4.2.0.beta3, 4.2.0.beta2, 4.2.0.beta1, 4.1.16, 4.1.16.rc1, 4.1.15, 4.1.15.rc1, 4.1.14.2, 4.1.14.1, 4.1.14, 4.1.14.rc2, 4.1.14.rc1, 4.1.13, 4.1.13.rc1, 4.1.12, 4.1.12.rc1, 4.1.11, 4.1.10, 4.1.10.rc4, 4.1.10.rc3, 4.1.10.rc2, 4.1.10.rc1, 4.1.9, 4.1.9.rc1, 4.1.8, 4.1.7.1, 4.1.7, 4.1.6, 4.1.6.rc2, 4.1.6.rc1, 4.1.5, 4.1.4, 4.1.3, 4.1.2, 4.1.2.rc3, 4.1.2.rc2, 4.1.2.rc1, 4.1.1, 4.1.0, 4.1.0.rc2, 4.1.0.rc1, 4.1.0.beta2, 4.1.0.beta1, 4.0.13, 4.0.13.rc1, 4.0.12, 4.0.11.1, 4.0.11, 4.0.10, 4.0.10.rc2, 4.0.10.rc1, 4.0.9, 4.0.8, 4.0.7, 4.0.6, 4.0.6.rc3, 4.0.6.rc2, 4.0.6.rc1, 4.0.5, 4.0.4, 4.0.4.rc1, 4.0.3, 4.0.0.rc2, 4.0.0.rc1, 4.0.0.beta1, 3.2.22.5, 3.2.22.4, 3.2.22.3, 3.2.22.2, 3.2.22.1, 3.2.22, 3.2.21, 3.2.20, 3.2.19, 3.2.18, 3.2.17, 7.0.0.alpha2, 7.0.0.alpha1, 7.0.0.rc1, 7.0.0.rc3, 7.0.0.rc2, 7.1.0.beta1, 7.1.0.rc1, 7.1.0.rc2, 7.1.3.2, 7.1.3.1, 7.0.8.1, 6.1.7.7, 7.1.3.3, 7.0.8.2, 7.0.8.3, 7.2.0.beta1, 7.2.0.beta2, 7.1.3.4, 7.0.8.4, 6.1.7.8, 7.2.0.beta3, 7.2.0.rc1, 7.2.0, 7.2.1, 7.1.4, 8.0.0.beta1, 7.2.1.1, 7.1.4.1, 7.0.8.5, 6.1.7.9, 8.0.0.rc1, 7.2.1.2, 7.1.4.2, 7.0.8.6, 6.1.7.10]
Recommendation:
Update to version 7.2.1.2.
488 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 8.0.0.rc1 | MIT | 2024-10-19 - 01:43 | 6 days | |
| 8.0.0.beta1 | MIT | 2024-09-26 - 15:05 | 29 days | |
| 7.2.1.2 | MIT | 2024-10-23 - 22:35 | 1 day | |
| 7.2.1.1 | MIT | 2024-10-15 - 20:46 | 10 days | |
| 7.2.1 | MIT | 2024-08-22 - 19:48 | 2 months | |
| 7.2.0 | MIT | 2024-08-09 - 23:47 | 3 months | |
| 7.2.0.rc1 | MIT | 2024-08-06 - 17:06 | 3 months | |
| 7.2.0.beta3 | MIT | 2024-07-11 - 15:44 | 4 months | |
| 7.2.0.beta2 | MIT | 2024-06-04 - 18:15 | 5 months | |
| 7.2.0.beta1 | MIT | 2024-05-29 - 23:40 | 5 months | |
| 7.1.4.2 | MIT | 2024-10-23 - 22:29 | 1 day | |
| 7.1.4.1 | MIT | 2024-10-15 - 20:40 | 10 days | |
| 7.1.4 | MIT | 2024-08-22 - 21:29 | 2 months | |
| 7.1.3.4 | MIT | 2024-06-04 - 18:00 | 5 months | |
| 7.1.3.3 | MIT | 2024-05-16 - 19:23 | 5 months | |
| 7.1.3.2 | MIT | 2024-02-21 - 21:46 | 8 months | |
| 7.1.3.1 | MIT | 2024-02-21 - 18:46 | 8 months | |
| 7.1.3 | MIT | 2 | 2024-01-16 - 22:56 | 9 months |
| 7.1.2 | MIT | 2 | 2023-11-10 - 21:52 | 12 months |
| 7.1.1 | MIT | 2 | 2023-10-11 - 22:19 | about 1 year |
| 7.1.0 | MIT | 2 | 2023-10-05 - 08:09 | about 1 year |
| 7.1.0.rc2 | MIT | 2023-10-01 - 22:02 | about 1 year | |
| 7.1.0.rc1 | MIT | 2023-09-27 - 04:03 | about 1 year | |
| 7.1.0.beta1 | MIT | 2023-09-13 - 00:41 | about 1 year | |
| 7.0.8.6 | MIT | 2024-10-23 - 22:23 | 1 day | |
| 7.0.8.5 | MIT | 2024-10-15 - 20:29 | 10 days | |
| 7.0.8.4 | MIT | 2024-06-04 - 17:57 | 5 months | |
| 7.0.8.3 | MIT | 2024-05-17 - 19:54 | 5 months | |
| 7.0.8.2 | MIT | 2024-05-16 - 19:00 | 5 months | |
| 7.0.8.1 | MIT | 2024-02-21 - 18:43 | 8 months | |
| 7.0.8 | MIT | 2 | 2023-09-09 - 19:15 | about 1 year |
| 7.0.7.2 | MIT | 2 | 2023-08-22 - 20:10 | about 1 year |
| 7.0.7.1 | MIT | 2 | 2023-08-22 - 17:20 | about 1 year |
| 7.0.7 | MIT | 2 | 2023-08-09 - 23:58 | about 1 year |
| 7.0.6 | MIT | 2 | 2023-06-29 - 20:57 | over 1 year |
| 7.0.5.1 | MIT | 2 | 2023-06-26 - 21:43 | over 1 year |
| 7.0.5 | MIT | 2 | 2023-05-24 - 19:21 | over 1 year |
| 7.0.4.3 | MIT | 2 | 2023-03-13 - 18:53 | over 1 year |
| 7.0.4.2 | MIT | 2 | 2023-01-25 - 03:14 | over 1 year |
| 7.0.4.1 | MIT | 2 | 2023-01-17 - 18:55 | almost 2 years |
| 7.0.4 | MIT | 2 | 2022-09-09 - 18:42 | about 2 years |
| 7.0.3.1 | MIT | 2 | 2022-07-12 - 17:31 | over 2 years |
| 7.0.3 | MIT | 2 | 2022-05-09 - 13:41 | over 2 years |
| 7.0.2.4 | MIT | 2 | 2022-04-26 - 19:33 | over 2 years |
| 7.0.2.3 | MIT | 2 | 2022-03-08 - 17:50 | over 2 years |
| 7.0.2.2 | MIT | 2 | 2022-02-11 - 19:44 | over 2 years |
| 7.0.2.1 | MIT | 2 | 2022-02-11 - 18:19 | over 2 years |
| 7.0.2 | MIT | 2 | 2022-02-08 - 23:13 | over 2 years |
| 7.0.1 | MIT | 2 | 2022-01-06 - 21:55 | almost 3 years |
| 7.0.0 | MIT | 2 | 2021-12-15 - 23:45 | almost 3 years |
| 7.0.0.rc3 | MIT | 2021-12-14 - 23:04 | almost 3 years | |
| 7.0.0.rc2 | MIT | 2021-12-14 - 19:40 | almost 3 years | |
| 7.0.0.rc1 | MIT | 2021-12-06 - 21:33 | almost 3 years | |
| 7.0.0.alpha2 | MIT | 2021-09-15 - 23:16 | about 3 years | |
| 7.0.0.alpha1 | MIT | 2021-09-15 - 21:58 | about 3 years | |
| 6.1.7.10 | MIT | 2024-10-23 - 21:59 | 1 day | |
| 6.1.7.9 | MIT | 2024-10-15 - 21:25 | 10 days | |
| 6.1.7.8 | MIT | 2024-06-04 - 17:56 | 5 months | |
| 6.1.7.7 | MIT | 2024-02-21 - 18:39 | 8 months | |
| 6.1.7.6 | MIT | 1 | 2023-08-22 - 20:08 | about 1 year |
| 6.1.7.5 | MIT | 1 | 2023-08-22 - 17:16 | about 1 year |
| 6.1.7.4 | MIT | 1 | 2023-06-26 - 21:32 | over 1 year |
| 6.1.7.3 | MIT | 1 | 2023-03-13 - 18:48 | over 1 year |
| 6.1.7.2 | MIT | 1 | 2023-01-25 - 03:23 | over 1 year |
| 6.1.7.1 | MIT | 1 | 2023-01-17 - 18:54 | almost 2 years |
| 6.1.7 | MIT | 1 | 2022-09-09 - 18:39 | about 2 years |
| 6.1.6.1 | MIT | 1 | 2022-07-12 - 17:29 | over 2 years |
| 6.1.6 | MIT | 1 | 2022-05-09 - 13:46 | over 2 years |
| 6.1.5.1 | MIT | 1 | 2022-04-26 - 19:30 | over 2 years |
| 6.1.5 | MIT | 1 | 2022-03-10 - 21:17 | over 2 years |
| 6.1.4.7 | MIT | 1 | 2022-03-08 - 17:49 | over 2 years |
| 6.1.4.6 | MIT | 1 | 2022-02-11 - 19:42 | over 2 years |
| 6.1.4.5 | MIT | 1 | 2022-02-11 - 18:23 | over 2 years |
| 6.1.4.4 | MIT | 1 | 2021-12-15 - 22:54 | almost 3 years |
| 6.1.4.3 | MIT | 1 | 2021-12-14 - 23:02 | almost 3 years |
| 6.1.4.2 | MIT | 1 | 2021-12-14 - 19:54 | almost 3 years |
| 6.1.4.1 | MIT | 1 | 2021-08-19 - 16:27 | about 3 years |
| 6.1.4 | MIT | 1 | 2021-06-24 - 20:41 | over 3 years |
| 6.1.3.2 | MIT | 1 | 2021-05-05 - 15:47 | over 3 years |
| 6.1.3.1 | MIT | 1 | 2021-03-26 - 18:08 | over 3 years |
| 6.1.3 | MIT | 1 | 2021-02-17 - 18:43 | over 3 years |
| 6.1.2.1 | MIT | 1 | 2021-02-10 - 20:46 | over 3 years |
| 6.1.2 | MIT | 1 | 2021-02-09 - 21:30 | over 3 years |
| 6.1.1 | MIT | 1 | 2021-01-07 - 23:00 | almost 4 years |
| 6.1.0 | MIT | 1 | 2020-12-09 - 19:58 | almost 4 years |
| 6.1.0.rc2 | MIT | 1 | 2020-12-01 - 22:02 | almost 4 years |
| 6.1.0.rc1 | MIT | 1 | 2020-11-02 - 21:21 | almost 4 years |
| 6.0.6.1 | MIT | 1 | 2023-01-17 - 18:53 | almost 2 years |
| 6.0.6 | MIT | 1 | 2022-09-09 - 18:32 | about 2 years |
| 6.0.5.1 | MIT | 1 | 2022-07-12 - 17:28 | over 2 years |
| 6.0.5 | MIT | 1 | 2022-05-09 - 13:55 | over 2 years |
| 6.0.4.8 | MIT | 1 | 2022-04-26 - 19:27 | over 2 years |
| 6.0.4.7 | MIT | 1 | 2022-03-08 - 17:47 | over 2 years |
| 6.0.4.6 | MIT | 1 | 2022-02-11 - 19:40 | over 2 years |
| 6.0.4.5 | MIT | 1 | 2022-02-11 - 18:25 | over 2 years |
| 6.0.4.4 | MIT | 1 | 2021-12-15 - 22:48 | almost 3 years |
| 6.0.4.3 | MIT | 1 | 2021-12-14 - 23:01 | almost 3 years |
| 6.0.4.2 | MIT | 1 | 2021-12-14 - 20:11 | almost 3 years |
| 6.0.4.1 | MIT | 1 | 2021-08-19 - 16:24 | about 3 years |
| 6.0.4 | MIT | 1 | 2021-06-15 - 20:18 | over 3 years |