https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:52:35.354729+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-024 certa-2013-avi-024 — Deux vulnérabilités ont été corrigées dans <span class="textit">Ruby on Rails</span> Elles concernent des exécutions de… 2026-10-03T04:52:35.531308+00:00 certa-2013-avi-024 https://cve.radiocsirt.org/vuln/euvd-2026-104524 EUVD-2026-104524 2026-10-03T04:52:35.531355+00:00 EUVD-2026-104524 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0156 fkie_cve-2013-0156 2026-10-03T04:52:35.531371+00:00

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.

 https://cve.radiocsirt.org/vuln/ghsa-jmgw-6vjg-jjwg GHSA-jmgw-6vjg-jjwg — actionpack Improper Input Validation vulnerability 2026-10-03T04:52:35.531402+00:00

Affected: RubyGems: actionpack

`active_support/core_ext/hash/conversions.rb` in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.

 https://cve.radiocsirt.org/vuln/gsd-2013-0156 gsd-2013-0156 2026-10-03T04:52:35.531430+00:00 gsd-2013-0156 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10188-1 openSUSE-SU-2024:10188-1 — ruby2.2-rubygem-extlib-0.9.16-7.4 on GA media 2026-10-03T04:52:35.531443+00:00

ruby2.2-rubygem-extlib-0.9.16-7.4 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2013:0153 RHSA-2013:0153 — Red Hat Security Advisory: Ruby on Rails security update 2026-10-03T04:52:35.531460+00:00

rubygem-activesupport: Multiple vulnerabilities in parameter parsing in ActionPack

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-0156 Withdrawn: UBUNTU-CVE-2013-0156 2026-10-03T04:52:35.531476+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: ruby-extlib

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.