Ruby/rails/4.0.1
Ruby on Rails is a full-stack web framework optimized for programmer happiness and sustainable productivity. It encourages beautiful code by favoring convention over configuration.
https://rubygems.org/gems/rails
MIT
1 Security Vulnerabilities
Rails vulnerable to Cross-site Scripting
Published date: 2017-10-24T18:33:36Z
CVE: CVE-2014-0081
Links:
- https://nvd.nist.gov/vuln/detail/CVE-2014-0081
- https://github.com/advisories/GHSA-m46p-ggm5-5j83
- https://groups.google.com/forum/message/raw?msg=rubyonrails-security/tfp6gZCtzr4/j8LUHmu7fIEJ
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html
- http://openwall.com/lists/oss-security/2014/02/18/8
- http://rhn.redhat.com/errata/RHSA-2014-0215.html
- http://rhn.redhat.com/errata/RHSA-2014-0306.html
- http://secunia.com/advisories/57376
- http://www.securityfocus.com/bid/65647
- http://www.securitytracker.com/id/1029782
- https://web.archive.org/web/20140911141416/http://www.securitytracker.com/id/1029782
- https://web.archive.org/web/20170307202606/http://www.securityfocus.com/bid/65647
Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negativeformat, or (3) units parameter to the (a) numbertocurrency, (b) numbertopercentage, or (c) numberto_human helper.
Affected versions:
["4.0.2", "4.0.1", "4.0.1.rc4", "4.0.1.rc3", "4.0.1.rc2", "4.0.1.rc1", "4.0.0", "3.2.16", "3.2.15", "3.2.15.rc3", "3.2.15.rc2", "3.2.15.rc1", "3.2.14", "3.2.14.rc2", "3.2.14.rc1", "3.2.13", "3.2.13.rc2", "3.2.13.rc1", "3.2.12", "3.2.11", "3.2.10", "3.2.9", "3.2.9.rc3", "3.2.9.rc2", "3.2.9.rc1", "3.2.8", "3.2.8.rc2", "3.2.8.rc1", "3.2.7", "3.2.7.rc1", "3.2.6", "3.2.5", "3.2.4", "3.2.4.rc1", "3.2.3", "3.2.3.rc2", "3.2.3.rc1", "3.2.2", "3.2.2.rc1", "3.2.1", "3.2.0", "3.2.0.rc2", "3.2.0.rc1", "3.1.12", "3.1.11", "3.1.10", "3.1.9", "3.1.8", "3.1.7", "3.1.6", "3.1.5", "3.1.5.rc1", "3.1.4", "3.1.4.rc1", "3.1.3", "3.1.2", "3.1.2.rc2", "3.1.2.rc1", "3.1.1", "3.1.1.rc3", "3.1.1.rc2", "3.1.1.rc1", "3.1.0", "3.1.0.rc8", "3.1.0.rc6", "3.1.0.rc5", "3.1.0.rc4", "3.1.0.rc3", "3.1.0.rc2", "3.1.0.rc1", "3.1.0.beta1", "3.0.20", "3.0.19", "3.0.18", "3.0.17", "3.0.16", "3.0.15", "3.0.14", "3.0.13", "3.0.13.rc1", "3.0.12", "3.0.12.rc1", "3.0.11", "3.0.10", "3.0.10.rc1", "3.0.9", "3.0.9.rc5", "3.0.9.rc4", "3.0.9.rc3", "3.0.9.rc1", "3.0.8", "3.0.8.rc4", "3.0.8.rc2", "3.0.8.rc1", "3.0.7", "3.0.7.rc2", "3.0.7.rc1", "3.0.6", "3.0.6.rc2", "3.0.6.rc1", "3.0.5", "3.0.5.rc1", "3.0.4", "3.0.4.rc1", "3.0.3", "3.0.2", "3.0.1", "3.0.0"]
Secure versions:
[6.1.0.rc1, 6.0.3.4, 6.0.3.3, 6.0.3.2, 6.0.3.1, 6.0.3, 6.0.3.rc1, 6.0.2.2, 6.0.2.1, 6.0.2, 6.0.2.rc2, 6.0.2.rc1, 6.0.1, 6.0.1.rc1, 6.0.0, 6.0.0.rc2, 6.0.0.rc1, 6.0.0.beta3, 6.0.0.beta2, 6.0.0.beta1, 5.2.4.4, 5.2.4.3, 5.2.4.2, 5.2.4.1, 5.2.4, 5.2.4.rc1, 5.2.3, 5.2.3.rc1, 5.2.2.1, 5.2.2, 5.2.2.rc1, 5.2.1.1, 5.2.1, 5.2.1.rc1, 5.2.0, 5.2.0.rc2, 5.2.0.rc1, 5.2.0.beta2, 5.2.0.beta1, 5.1.7, 5.1.7.rc1, 5.1.6.2, 5.1.6.1, 5.1.6, 5.1.5, 5.1.5.rc1, 5.1.4, 5.1.4.rc1, 5.1.3, 5.1.3.rc3, 5.1.3.rc2, 5.1.3.rc1, 5.1.2, 5.1.2.rc1, 5.1.1, 5.1.0, 5.1.0.rc2, 5.1.0.rc1, 5.1.0.beta1, 5.0.7.2, 5.0.7.1, 5.0.7, 5.0.6, 5.0.6.rc1, 5.0.5, 5.0.5.rc2, 5.0.5.rc1, 5.0.4, 5.0.4.rc1, 5.0.3, 5.0.2, 5.0.2.rc1, 5.0.1, 5.0.1.rc2, 5.0.1.rc1, 5.0.0.1, 5.0.0, 5.0.0.rc2, 5.0.0.rc1, 5.0.0.racecar1, 5.0.0.beta4, 5.0.0.beta3, 5.0.0.beta2, 5.0.0.beta1.1, 5.0.0.beta1, 4.2.11.3, 4.2.11.2, 4.2.11.1, 4.2.11, 4.2.10, 4.2.10.rc1, 4.2.9, 4.2.9.rc2, 4.2.9.rc1, 4.2.8, 4.2.8.rc1, 4.2.7.1, 4.2.7, 4.2.7.rc1, 4.2.6, 4.2.6.rc1, 4.2.5.2, 4.2.5.1, 4.2.5, 4.2.5.rc2, 4.2.5.rc1, 4.2.4, 4.2.4.rc1, 4.2.3, 4.2.3.rc1, 4.2.2, 4.2.1, 4.2.1.rc4, 4.2.1.rc3, 4.2.1.rc2, 4.2.1.rc1, 4.2.0, 4.2.0.rc3, 4.2.0.rc2, 4.2.0.rc1, 4.2.0.beta4, 4.2.0.beta3, 4.2.0.beta2, 4.2.0.beta1, 4.1.16, 4.1.16.rc1, 4.1.15, 4.1.15.rc1, 4.1.14.2, 4.1.14.1, 4.1.14, 4.1.14.rc2, 4.1.14.rc1, 4.1.13, 4.1.13.rc1, 4.1.12, 4.1.12.rc1, 4.1.11, 4.1.10, 4.1.10.rc4, 4.1.10.rc3, 4.1.10.rc2, 4.1.10.rc1, 4.1.9, 4.1.9.rc1, 4.1.8, 4.1.7.1, 4.1.7, 4.1.6, 4.1.6.rc2, 4.1.6.rc1, 4.1.5, 4.1.4, 4.1.3, 4.1.2, 4.1.2.rc3, 4.1.2.rc2, 4.1.2.rc1, 4.1.1, 4.1.0, 4.1.0.rc2, 4.1.0.rc1, 4.1.0.beta2, 4.1.0.beta1, 4.0.13, 4.0.13.rc1, 4.0.12, 4.0.11.1, 4.0.11, 4.0.10, 4.0.10.rc2, 4.0.10.rc1, 4.0.9, 4.0.8, 4.0.7, 4.0.6, 4.0.6.rc3, 4.0.6.rc2, 4.0.6.rc1, 4.0.5, 4.0.4, 4.0.4.rc1, 4.0.3, 4.0.0.rc2, 4.0.0.rc1, 4.0.0.beta1, 3.2.22.5, 3.2.22.4, 3.2.22.3, 3.2.22.2, 3.2.22.1, 3.2.22, 3.2.21, 3.2.20, 3.2.19, 3.2.18, 3.2.17, 6.1.0.rc2, 6.1.0, 6.1.1, 6.1.2, 6.1.2.1, 6.0.3.5, 5.2.4.5, 6.1.3, 6.1.3.1, 6.0.3.6, 5.2.5, 6.1.3.2, 6.0.3.7, 5.2.6, 5.2.4.6, 6.0.4, 6.1.4, 6.1.4.1, 6.0.4.1, 7.0.0.alpha2, 7.0.0.alpha1, 7.0.0.rc1, 7.0.0.rc3, 7.0.0.rc2, 6.1.4.3, 6.1.4.2, 6.0.4.3, 6.0.4.2, 7.0.0, 6.1.4.4, 6.0.4.4, 7.0.1, 7.0.2, 7.0.2.2, 7.0.2.1, 6.1.4.6, 6.1.4.5, 6.0.4.6, 6.0.4.5, 5.2.6.2, 5.2.6.1, 6.0.4.7, 5.2.6.3, 7.0.2.3, 6.1.4.7, 6.1.5, 5.2.7, 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1, 7.0.3, 6.1.6, 6.0.5, 5.2.8, 7.0.3.1, 6.1.6.1, 6.0.5.1, 5.2.8.1, 7.0.4, 6.1.7, 6.0.6, 7.0.4.1, 6.1.7.1, 6.0.6.1, 7.0.4.2, 6.1.7.2, 7.0.4.3, 6.1.7.3, 7.0.5]
Recommendation:
Update to version 7.0.5.
445 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 5.2.2.rc1 | MIT | 2018-11-28 - 22:55 | over 4 years | |
| 5.2.1.1 | MIT | 2018-11-27 - 20:14 | over 4 years | |
| 5.2.1 | MIT | 2018-08-07 - 21:44 | almost 5 years | |
| 5.2.1.rc1 | MIT | 2018-07-30 - 20:22 | almost 5 years | |
| 5.2.0 | MIT | 2018-04-09 - 20:07 | about 5 years | |
| 5.2.0.rc2 | MIT | 2018-03-20 - 17:54 | about 5 years | |
| 5.2.0.rc1 | MIT | 2018-01-30 - 23:38 | over 5 years | |
| 5.2.0.beta2 | MIT | 2017-11-28 - 05:04 | over 5 years | |
| 5.2.0.beta1 | MIT | 2017-11-27 - 19:19 | over 5 years | |
| 5.1.7 | MIT | 2019-03-28 - 02:48 | about 4 years | |
| 5.1.7.rc1 | MIT | 2019-03-22 - 04:13 | about 4 years | |
| 5.1.6.2 | MIT | 2019-03-13 - 16:46 | about 4 years | |
| 5.1.6.1 | MIT | 2018-11-27 - 20:11 | over 4 years | |
| 5.1.6 | MIT | 2018-03-29 - 18:29 | about 5 years | |
| 5.1.5 | MIT | 2018-02-14 - 20:02 | over 5 years | |
| 5.1.5.rc1 | MIT | 2018-02-01 - 19:00 | over 5 years | |
| 5.1.4 | MIT | 2017-09-08 - 00:52 | over 5 years | |
| 5.1.4.rc1 | MIT | 2017-08-24 - 19:37 | almost 6 years | |
| 5.1.3 | MIT | 2017-08-03 - 19:15 | almost 6 years | |
| 5.1.3.rc3 | MIT | 2017-07-31 - 19:12 | almost 6 years | |
| 5.1.3.rc2 | MIT | 2017-07-25 - 20:18 | almost 6 years | |
| 5.1.3.rc1 | MIT | 2017-07-19 - 19:38 | almost 6 years | |
| 5.1.2 | MIT | 2017-06-26 - 21:51 | almost 6 years | |
| 5.1.2.rc1 | MIT | 2017-06-20 - 17:03 | almost 6 years | |
| 5.1.1 | MIT | 2017-05-12 - 20:11 | about 6 years | |
| 5.1.0 | MIT | 2017-04-27 - 21:00 | about 6 years | |
| 5.1.0.rc2 | MIT | 2017-04-21 - 01:31 | about 6 years | |
| 5.1.0.rc1 | MIT | 2017-03-20 - 18:57 | about 6 years | |
| 5.1.0.beta1 | MIT | 2017-02-23 - 20:00 | over 6 years | |
| 5.0.7.2 | MIT | 2019-03-13 - 16:44 | about 4 years | |
| 5.0.7.1 | MIT | 2018-11-27 - 20:09 | over 4 years | |
| 5.0.7 | MIT | 2018-03-29 - 18:18 | about 5 years | |
| 5.0.6 | MIT | 2017-09-08 - 00:47 | over 5 years | |
| 5.0.6.rc1 | MIT | 2017-08-24 - 19:21 | almost 6 years | |
| 5.0.5 | MIT | 2017-07-31 - 19:05 | almost 6 years | |
| 5.0.5.rc2 | MIT | 2017-07-25 - 20:26 | almost 6 years | |
| 5.0.5.rc1 | MIT | 2017-07-19 - 19:43 | almost 6 years | |
| 5.0.4 | MIT | 2017-06-19 - 21:58 | almost 6 years | |
| 5.0.4.rc1 | MIT | 2017-06-14 - 20:49 | almost 6 years | |
| 5.0.3 | MIT | 2017-05-12 - 20:08 | about 6 years | |
| 5.0.2 | MIT | 2017-03-01 - 23:13 | over 6 years | |
| 5.0.2.rc1 | MIT | 2017-02-25 - 00:55 | over 6 years | |
| 5.0.1 | MIT | 2016-12-21 - 00:07 | over 6 years | |
| 5.0.1.rc2 | MIT | 2016-12-09 - 19:13 | over 6 years | |
| 5.0.1.rc1 | MIT | 2016-11-30 - 20:02 | over 6 years | |
| 5.0.0.1 | MIT | 2016-08-11 - 17:35 | almost 7 years | |
| 5.0.0 | MIT | 2016-06-30 - 21:32 | almost 7 years | |
| 5.0.0.rc2 | MIT | 2016-06-22 - 20:03 | almost 7 years | |
| 5.0.0.rc1 | MIT | 2016-05-06 - 21:57 | about 7 years | |
| 5.0.0.beta4 | MIT | 2016-04-27 - 20:55 | about 7 years | |
| 5.0.0.beta3 | MIT | 2016-02-24 - 16:16 | over 7 years | |
| 5.0.0.beta2 | MIT | 2016-02-01 - 22:06 | over 7 years | |
| 5.0.0.beta1.1 | MIT | 2016-01-25 - 19:26 | over 7 years | |
| 5.0.0.beta1 | MIT | 2015-12-18 - 21:18 | over 7 years | |
| 5.0.0.racecar1 | MIT | 2016-05-06 - 22:02 | about 7 years | |
| 4.2.11.3 | MIT | 2020-05-15 - 18:35 | about 3 years | |
| 4.2.11.2 | MIT | 2020-05-15 - 16:30 | about 3 years | |
| 4.2.11.1 | MIT | 2019-03-13 - 16:37 | about 4 years | |
| 4.2.11 | MIT | 2018-11-27 - 20:07 | over 4 years | |
| 4.2.10 | MIT | 2017-09-27 - 14:29 | over 5 years | |
| 4.2.10.rc1 | MIT | 2017-09-20 - 19:42 | over 5 years | |
| 4.2.9 | MIT | 2017-06-26 - 21:30 | almost 6 years | |
| 4.2.9.rc2 | MIT | 2017-06-19 - 22:28 | almost 6 years | |
| 4.2.9.rc1 | MIT | 2017-06-13 - 18:50 | almost 6 years | |
| 4.2.8 | MIT | 2017-02-21 - 16:08 | over 6 years | |
| 4.2.8.rc1 | MIT | 2017-02-10 - 02:46 | over 6 years | |
| 4.2.7.1 | MIT | 2016-08-11 - 17:35 | almost 7 years | |
| 4.2.7 | MIT | 2016-07-13 - 02:57 | almost 7 years | |
| 4.2.7.rc1 | MIT | 2016-07-01 - 00:33 | almost 7 years | |
| 4.2.6 | MIT | 2016-03-07 - 22:33 | over 7 years | |
| 4.2.6.rc1 | MIT | 2016-03-01 - 18:37 | over 7 years | |
| 4.2.5.2 | MIT | 2016-02-29 - 19:17 | over 7 years | |
| 4.2.5.1 | MIT | 2016-01-25 - 19:26 | over 7 years | |
| 4.2.5 | MIT | 2015-11-12 - 17:06 | over 7 years | |
| 4.2.5.rc2 | MIT | 2015-11-05 - 03:02 | over 7 years | |
| 4.2.5.rc1 | MIT | 2015-10-30 - 20:47 | over 7 years | |
| 4.2.4 | MIT | 2015-08-24 - 18:27 | almost 8 years | |
| 4.2.4.rc1 | MIT | 2015-08-14 - 15:21 | almost 8 years | |
| 4.2.3 | MIT | 2015-06-25 - 21:30 | almost 8 years | |
| 4.2.3.rc1 | MIT | 2015-06-22 - 14:23 | almost 8 years | |
| 4.2.2 | MIT | 2015-06-16 - 18:03 | almost 8 years | |
| 4.2.1 | MIT | 2015-03-19 - 16:42 | about 8 years | |
| 4.2.1.rc4 | MIT | 2015-03-12 - 21:25 | about 8 years | |
| 4.2.1.rc3 | MIT | 2015-03-02 - 21:35 | over 8 years | |
| 4.2.1.rc2 | MIT | 2015-02-25 - 22:19 | over 8 years | |
| 4.2.1.rc1 | MIT | 2015-02-20 - 22:21 | over 8 years | |
| 4.2.0 | MIT | 2014-12-20 - 00:15 | over 8 years | |
| 4.2.0.rc3 | MIT | 2014-12-13 - 02:58 | over 8 years | |
| 4.2.0.rc2 | MIT | 2014-12-05 - 23:20 | over 8 years | |
| 4.2.0.rc1 | MIT | 2014-11-28 - 17:53 | over 8 years | |
| 4.2.0.beta4 | MIT | 2014-10-30 - 22:13 | over 8 years | |
| 4.2.0.beta3 | MIT | 2014-10-30 - 18:37 | over 8 years | |
| 4.2.0.beta2 | MIT | 2014-09-29 - 17:16 | over 8 years | |
| 4.2.0.beta1 | MIT | 2014-08-20 - 02:34 | almost 9 years | |
| 4.1.16 | MIT | 2016-07-12 - 22:20 | almost 7 years | |
| 4.1.16.rc1 | MIT | 2016-07-02 - 02:15 | almost 7 years | |
| 4.1.15 | MIT | 2016-03-07 - 22:37 | over 7 years | |
| 4.1.15.rc1 | MIT | 2016-03-01 - 18:43 | over 7 years | |
| 4.1.14.2 | MIT | 2016-02-29 - 19:19 | over 7 years | |
| 4.1.14.1 | MIT | 2016-01-25 - 19:26 | over 7 years |