https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:46:13.428782+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-256461 EUVD-2026-256461 2026-10-03T00:46:13.545394+00:00 EUVD-2026-256461 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0130 fkie_cve-2014-0130 2026-10-03T00:46:13.545439+00:00

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.

 https://cve.radiocsirt.org/vuln/ghsa-6x85-j5j2-27jx GHSA-6x85-j5j2-27jx — actionpack Path Traversal vulnerability 2026-10-03T00:46:13.545474+00:00

Affected: RubyGems: actionpack

Directory traversal vulnerability in `actionpack/lib/abstract_controller/base.rb` in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.

 https://cve.radiocsirt.org/vuln/gsd-2014-0130 gsd-2014-0130 2026-10-03T00:46:13.545502+00:00 gsd-2014-0130 https://cve.radiocsirt.org/vuln/rhsa-2014:0510 RHSA-2014:0510 — Red Hat Security Advisory: ruby193-rubygem-actionpack security update 2026-10-03T00:46:13.545515+00:00

rubygem-actionpack: directory traversal issue

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-0130 Withdrawn: UBUNTU-CVE-2014-0130 2026-10-03T00:46:13.545533+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: rails, Ubuntu:18.04:LTS: rails

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.