rubygems

activerecord

26 Total advisories

26 Vulnerabilities

0 Malware

Dependency scanning

Check whether activerecord is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

activerecord

Vulnerabilities

Active Record RCE bug with Serialized Columns

Active Record logging vulnerable to ANSI escape injection

Active Record component in Ruby on Rails has a data-type injection vulnerability

Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter

activerecord vulnerable to SQL Injection

SQL Injection in Active Record

Active Record contains SQL Injection

activerecord vulnerable to SQL Injection

Array data injection vulnerability in activerecord

Rails activerecord gem has Improper Input Validation vulnerability

Rails ActiveRecord gem vulnerable to SQL injection

Active Record vulnerable to SQL Injection via nested query parameters

Active Record contains deserialization of arbitrary YAML

Moderate severity vulnerability that affects activerecord

Moderate severity vulnerability that affects activerecord

High severity vulnerability that affects activerecord

Active Record subject to strong parameters protection bypass

Active Record Improper Input Validation

ActiveRecord vulnerable to modification of protected model attributes

Active Record allows bypassing of database-query restrictions

Active Record contains SQL Injection via improper range quoting

activerecord vulnerable to SQL Injection

SQL Injection Vulnerability via ActiveRecord comments

ActiveRecord in Ruby on Rails allows database-query bypass

Active Record subject to Regular Expression Denial-of-Service (ReDoS)

Active Record Improper Access Control

Browse more RubyGems advisories

Start Securing