https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:55:28.982910+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-133 certa-2013-avi-133 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Ruby on Rails</span> . Elles permettent à un at… 2026-10-03T14:55:29.039036+00:00 certa-2013-avi-133 https://cve.radiocsirt.org/vuln/euvd-2026-104559 EUVD-2026-104559 2026-10-03T14:55:29.039078+00:00 EUVD-2026-104559 https://cve.radiocsirt.org/vuln/fkie_cve-2013-0277 fkie_cve-2013-0277 2026-10-03T14:55:29.039093+00:00

ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML.

 https://cve.radiocsirt.org/vuln/ghsa-fhj9-cjjh-27vm GHSA-fhj9-cjjh-27vm — Active Record contains deserialization of arbitrary YAML 2026-10-03T14:55:29.039120+00:00

Affected: RubyGems: activerecord

ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +serialize+ helper to deserialize arbitrary YAML.

 https://cve.radiocsirt.org/vuln/gsd-2013-0277 gsd-2013-0277 2026-10-03T14:55:29.039143+00:00 gsd-2013-0277