Fluid Attacks Database

Ecosystem DebianComponent rails

FLAT-1GO0B (CVE-2026-73648)

Reflected cross-site scripting (XSS) In ruby-rails-html-sanitizer

1.2

Low

Ecosystem: Debian

Component: ruby-rails-html-sanitizer

FLAT-OVA4I (CVE-2026-66066)

Insecure service configuration In rails

8.4

High

Ecosystem: Debian

Component: rails

FLAT-J795N (CVE-2026-33658)

Improper resource allocation In rails

2.3

Low

Ecosystem: Debian

Component: rails

FLAT-EFPB7 (CVE-2026-33202)

Remote command execution In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-9T10R (CVE-2026-33174)

Lack of data validation - Path Traversal In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-VK859 (CVE-2026-33173)

External control of file name or path In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-TUPZI (CVE-2026-33169)

Asymmetric denial of service - ReDoS In rails

2.7

Low

Ecosystem: Debian

Component: rails

FLAT-RFS9R (CVE-2026-33176)

Improper resource allocation In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-FKP1R (CVE-2026-33195)

Lack of data validation - Path Traversal In rails

8.0

High

Ecosystem: Debian

Component: rails

FLAT-B191H (CVE-2026-33170)

Server side cross-site scripting In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-9FPKC (CVE-2026-33168)

Reflected cross-site scripting (XSS) In rails

0.6

Low

Ecosystem: Debian

Component: rails

FLAT-NYPBH (DSA-6090-1)

Server-side request forgery (SSRF) In rails

7.9

High

Ecosystem: Debian

Component: rails

FLAT-EGKJR (DLA-4416-1)

Server-side request forgery (SSRF) In rails

7.9

High

Ecosystem: Debian

Component: rails

FLAT-NL2BA (DLA-4383-1)

Server-side request forgery (SSRF) In rails

7.9

High

Ecosystem: Debian

Component: rails

FLAT-8T2A5 (CVE-2025-24293)

Server side template injection In rails

7.2

High

Ecosystem: Debian

Component: rails

FLAT-AOZI4 (CVE-2025-55193)

Out-of-bounds read In rails

2.7

Low

Ecosystem: Debian

Component: rails

FLAT-5DVOL (DSA-5881-1)

Server side cross-site scripting In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-TXMC0 (CVE-2023-23913)

Reflected cross-site scripting (XSS) In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-EJZKR (CVE-2023-28362)

OS Command Injection In rails

0.2

Low

Ecosystem: Debian

Component: rails

FLAT-JLP0T (CVE-2023-28120)

Reflected cross-site scripting (XSS) In rails

2.7

Low

Ecosystem: Debian

Component: rails

FLAT-ARVVQ (CVE-2023-38037)

Insecure temporary files In rails

0.7

Low

Ecosystem: Debian

Component: rails

FLAT-1DKV0 (CVE-2024-54133)

Reflected cross-site scripting (XSS) In rails

0.6

Low

Ecosystem: Debian

Component: rails

FLAT-0F1L2 (CVE-2024-47888)

Asymmetric denial of service - ReDoS In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-XZZAD (CVE-2024-47889)

Asymmetric denial of service - ReDoS In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-127Y3 (CVE-2024-47887)

Asymmetric denial of service - ReDoS In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-Z9YS6 (CVE-2024-41128)

Asymmetric denial of service In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-URG4C (DLA-3902-1)

Server side cross-site scripting In ruby-rails-html-sanitizer

1.3

Low

Ecosystem: Debian

Component: ruby-rails-html-sanitizer

FLAT-E4RL6 (DLA-3566-1)

Server side cross-site scripting In ruby-rails-html-sanitizer

1.3

Low

Ecosystem: Debian

Component: ruby-rails-html-sanitizer

FLAT-ZDIMK (DSA-5389-1)

Lack of data validation - Path Traversal In rails

2.7

Low

Ecosystem: Debian

Component: rails

FLAT-6XVAF (DSA-5372-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-BR96D (CVE-2023-22794)

SQL injection In rails

6.3

Medium

Ecosystem: Debian

Component: rails

FLAT-XP9NP (CVE-2022-44566)

Asymmetric denial of service In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-VSWCG (CVE-2023-22796)

Asymmetric denial of service - ReDoS In rails

2.7

Low

Ecosystem: Debian

Component: rails

FLAT-7W67J (CVE-2023-22795)

Asymmetric denial of service - ReDoS In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-7MF9R (CVE-2023-22792)

Asymmetric denial of service - ReDoS In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-W0C3O (CVE-2022-23520)

Server side cross-site scripting In ruby-rails-html-sanitizer

1.3

Low

Ecosystem: Debian

Component: ruby-rails-html-sanitizer

FLAT-7SUGY (CVE-2022-23519)

Reflected cross-site scripting (XSS) In ruby-rails-html-sanitizer

1.2

Low

Ecosystem: Debian

Component: ruby-rails-html-sanitizer

FLAT-NC71K (CVE-2022-23517)

Asymmetric denial of service - ReDoS In ruby-rails-html-sanitizer

6.6

Medium

Ecosystem: Debian

Component: ruby-rails-html-sanitizer

FLAT-M88IF (CVE-2022-23518)

Reflected cross-site scripting (XSS) In ruby-rails-html-sanitizer

1.3

Low

Ecosystem: Debian

Component: ruby-rails-html-sanitizer

FLAT-2GDLS (DLA-3227-1)

Server side cross-site scripting In ruby-rails-html-sanitizer

1.3

Low

Ecosystem: Debian

Component: ruby-rails-html-sanitizer

FLAT-AXS32 (CVE-2022-32224)

Insecure deserialization In rails

8.1

High

Ecosystem: Debian

Component: rails

FLAT-21DWF (DLA-3093-2)

Lack of data validation In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-V890Y (DLA-3093-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-LGO1E (CVE-2022-22577)

Server side cross-site scripting In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-RW1AA (CVE-2022-27777)

Reflected cross-site scripting (XSS) In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-M7E56 (CVE-2022-21831)

Server side template injection In rails

8.1

High

Ecosystem: Debian

Component: rails

FLAT-2VGT9 (CVE-2022-23633)

Sensitive information sent insecurely In rails

4.6

Medium

Ecosystem: Debian

Component: rails

FLAT-GTYYM (CVE-2021-44528)

Uncontrolled external site redirect In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-0UVGU (DSA-4929-1)

Server side cross-site scripting In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-JE6VP (DLA-2655-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-KDGCX (DLA-2403-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-H2M66 (DSA-4766-1)

Server side cross-site scripting In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-I7I5D (CVE-2020-15169)

Reflected cross-site scripting (XSS) In rails

1.7

Low

Ecosystem: Debian

Component: rails

FLAT-KSAZ1 (DLA-2282-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-3BIUT (CVE-2020-8166)

Cross-site request forgery In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-AI6NY (CVE-2020-8165)

Insecure deserialization In rails

8.1

High

Ecosystem: Debian

Component: rails

FLAT-JLY0N (CVE-2020-8162)

Insecure file upload In rails

4.9

Medium

Ecosystem: Debian

Component: rails

FLAT-E4ZN5 (CVE-2020-8164)

Insecure deserialization In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-KDX7Q (DLA-2251-1)

Server side cross-site scripting In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-CWFUA (DLA-2149-1)

Server side cross-site scripting In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-VWOKL (CVE-2020-5267)

Lack of data validation - Path Traversal In rails

1.1

Low

Ecosystem: Debian

Component: rails

FLAT-AC5BL (CVE-2010-3299)

Insecure encryption algorithm In rails

4.6

Medium

Ecosystem: Debian

Component: rails

FLAT-8JHRS (DLA-1739-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-XRS49 (CVE-2019-5418)

Lack of data validation - Path Traversal In rails

4.9

Medium

Ecosystem: Debian

Component: rails

FLAT-3VPKK (CVE-2019-5419)

Asymmetric denial of service In rails

6.6

Medium

Ecosystem: Debian

Component: rails

FLAT-S9AF1 (CVE-2019-5420)

Insecure generation of random numbers In rails

6.3

Medium

Ecosystem: Debian

Component: rails

FLAT-91ECC (CVE-2017-17917)

SQL injection In rails

5.2

Medium

Ecosystem: Debian

Component: rails

FLAT-GPBPM (CVE-2017-17916)

SQL injection In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-N7K9K (CVE-2017-17920)

SQL injection In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-BCXNG (CVE-2017-17919)

SQL injection In rails

7.2

High

Ecosystem: Debian

Component: rails

FLAT-TDKNH (CVE-2015-3295)

Lack of data validation In ruby-rails-assets-markdown-it

2.7

Low

Ecosystem: Debian

Component: ruby-rails-assets-markdown-it

FLAT-GOIRK (DSA-3651-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-TO0E4 (DSA-3509-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-7CI1S (DSA-3464-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-C3X9D (DSA-2655-1)

Lack of data validation - Path Traversal In rails

2.7

Low

Ecosystem: Debian

Component: rails

FLAT-IZK7C (DSA-2620-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-VM4X6 (DSA-2613-1)

Lack of data validation In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-4AUO4 (DSA-2609-1)

NoSQL injection In rails

2.7

Low

Ecosystem: Debian

Component: rails

FLAT-LWACO (DSA-2604-1)

Lack of data validation In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-9Z0UT (DSA-2597-1)

Lack of data validation In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-ZYVCY (DSA-2466-1)

Server side cross-site scripting In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-TSG2E (DSA-2301-2)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-943PH (DSA-2301-1)

Lack of data validation - Path Traversal In rails

0.6

Low

Ecosystem: Debian

Component: rails

FLAT-3W71D (DSA-2260-1)

Lack of data validation - Path Traversal In rails

1.3

Low

Ecosystem: Debian

Component: rails

FLAT-O2RQW (DSA-2247-1)

Server-side request forgery (SSRF) In rails

6.8

Medium

Ecosystem: Debian

Component: rails

FLAT-8HXA9 (DSA-1887-1)

Server side cross-site scripting In rails

1.3

Low

Ecosystem: Debian

Component: rails