https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:41:23.684519+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-110229 EUVD-2026-110229 2026-10-02T22:41:23.688509+00:00 EUVD-2026-110229 https://cve.radiocsirt.org/vuln/fkie_cve-2012-1099 fkie_cve-2012-1099 2026-10-02T22:41:23.688550+00:00

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_options_helper.rb in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain generation of OPTION elements within SELECT elements.

 https://cve.radiocsirt.org/vuln/ghsa-2xjj-5x6h-8vmf GHSA-2xjj-5x6h-8vmf — Cross-site Scripting in actionpack 2026-10-02T22:41:23.688584+00:00

Affected: RubyGems: actionpack

Cross-site scripting (XSS) vulnerability in `actionpack/lib/action_view/helpers/form_options_helper.rb` in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain generation of OPTION elements within SELECT elements.

 https://cve.radiocsirt.org/vuln/gsd-2012-1099 gsd-2012-1099 2026-10-02T22:41:23.688611+00:00 gsd-2012-1099