R
Vendor security profile
rails
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
9toplam CVE
Uncertain9 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
5.1
9.5
CVE-2026-66066Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing
Patch verified Public Exploits:9EPSS %28
9.6
CVE-2026-45758Vulnerability in Guardrailsai Guardrails AI
Patch status unknownEPSS %0
8.0
CVE-2026-33195Rails Active Storage has possible Path Traversal in DiskService
Patch verifiedEPSS %1
6.1
CVE-2026-33167Cross-site scripting in Rubyonrails
Patch verifiedEPSS %0
-
CVE-2019-5418 Actively exploitedRails Ruby on Rails Path Traversal Vulnerability
Workaround Public Exploits:10EPSS %99
6.8
CVE-2016-0752 Actively exploitedrubygem-actionpack: directory traversal flaw in Action View
Partial patch Public Exploits:3EPSS %96
7.5
CVE-2014-0130 Actively exploitedrubygem-actionpack: directory traversal issue
Partial patch Public Exploits:1EPSS %54