https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T08:55:56.566924+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-travis-cve-2015-3226 BREW-travis-CVE-2015-3226 — activesupport Cross-site Scripting vulnerability 2026-10-27T08:55:56.572471+00:00

Affected: Homebrew: travis

Cross-site scripting (XSS) vulnerability in `json/encoding.rb` in Active Support in Ruby on Rails 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding.

 https://cve.radiocsirt.org/vuln/cnvd-2015-04089 cnvd-2015-04089 2026-10-27T08:55:56.572519+00:00 cnvd-2015-04089 https://cve.radiocsirt.org/vuln/euvd-2026-91788 EUVD-2026-91788 2026-10-27T08:55:56.572536+00:00 EUVD-2026-91788 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3226 fkie_cve-2015-3226 2026-10-27T08:55:56.572549+00:00

Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding.

 https://cve.radiocsirt.org/vuln/ghsa-vxvp-4xwc-jpp6 GHSA-vxvp-4xwc-jpp6 — activesupport Cross-site Scripting vulnerability 2026-10-27T08:55:56.572570+00:00

Affected: RubyGems: activesupport

Cross-site scripting (XSS) vulnerability in `json/encoding.rb` in Active Support in Ruby on Rails 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding.

 https://cve.radiocsirt.org/vuln/gsd-2015-3226 gsd-2015-3226 2026-10-27T08:55:56.572590+00:00 gsd-2015-3226 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10574-1 openSUSE-SU-2024:10574-1 — ruby2.2-rubygem-activesupport-4_2-4.2.7.1-1.1 on GA media 2026-10-27T08:55:56.572602+00:00

ruby2.2-rubygem-activesupport-4_2-4.2.7.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2016:0082-1 SUSE-SU-2016:0082-1 — Security update for rubygem-activesupport-4_1 2026-10-27T08:55:56.572624+00:00

Security update for rubygem-activesupport-4_1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3226 Withdrawn: UBUNTU-CVE-2015-3226 2026-10-27T08:55:56.572638+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: rails

Cross-site scripting (XSS) vulnerability in json/encoding.rb in Active Support in Ruby on Rails 3.x and 4.1.x before 4.1.11 and 4.2.x before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted Hash that is mishandled during JSON encoding.