https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:50:58.583642+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-06329 cnvd-2016-06329 2026-10-02T18:50:58.593327+00:00 cnvd-2016-06329 https://cve.radiocsirt.org/vuln/euvd-2026-85738 EUVD-2026-85738 2026-10-02T18:50:58.593372+00:00 EUVD-2026-85738 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6316 fkie_cve-2016-6316 2026-10-02T18:50:58.593392+00:00

Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers.

 https://cve.radiocsirt.org/vuln/ghsa-pc3m-v286-2jwj GHSA-pc3m-v286-2jwj — actionview Cross-site Scripting vulnerability 2026-10-02T18:50:58.593432+00:00

Affected: RubyGems: actionview

Cross-site scripting (XSS) vulnerability in Action View in Ruby on Rails 3.x before 3.2.22.3, 4.x before 4.2.7.1, and 5.x before 5.0.0.1 might allow remote attackers to inject arbitrary web script or HTML via text declared as "HTML safe" and used as attribute values in tag handlers.

 https://cve.radiocsirt.org/vuln/gsd-2016-6316 gsd-2016-6316 2026-10-02T18:50:58.593478+00:00 gsd-2016-6316 https://cve.radiocsirt.org/vuln/rhsa-2016:1855 RHSA-2016:1855 — Red Hat Security Advisory: rh-ror42 security update 2026-10-02T18:50:58.593494+00:00

rubygem-actionview: cross-site scripting flaw in Action View rubygem-activerecord: unsafe query generation in Active Record

 https://cve.radiocsirt.org/vuln/suse-su-2017:2716-1 SUSE-SU-2017:2716-1 — Security update for the Ruby on Rails stack 2026-10-02T18:50:58.593520+00:00

Security update for the Ruby on Rails stack