https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:16:55.577331+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01321 bdu:2021-01321 2026-10-06T13:16:55.694694+00:00 bdu:2021-01321 https://cve.radiocsirt.org/vuln/certfr-2020-avi-297 certfr-2020-avi-297 — Une vulnérabilité a été découverte dans Ruby on Rails. Elle permet à un attaquant de provoquer une exécution de code ar… 2026-10-06T13:16:55.694734+00:00 certfr-2020-avi-297 https://cve.radiocsirt.org/vuln/cnvd-2020-34451 cnvd-2020-34451 2026-10-06T13:16:55.694754+00:00 cnvd-2020-34451 https://cve.radiocsirt.org/vuln/euvd-2026-38288 EUVD-2026-38288 2026-10-06T13:16:55.694767+00:00 EUVD-2026-38288 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8163 fkie_cve-2020-8163 2026-10-06T13:16:55.694778+00:00

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

 https://cve.radiocsirt.org/vuln/ghsa-cr3x-7m39-c6jq GHSA-cr3x-7m39-c6jq — Remote code execution via user-provided local names in ActionView 2026-10-06T13:16:55.694807+00:00

Affected: RubyGems: actionview

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that would allow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

 https://cve.radiocsirt.org/vuln/gsd-2020-8163 gsd-2020-8163 2026-10-06T13:16:55.694830+00:00 gsd-2020-8163 https://cve.radiocsirt.org/vuln/suse-su-2020:2140-1 SUSE-SU-2020:2140-1 — Security update for rubygem-actionview-4_2 2026-10-06T13:16:55.694842+00:00

Security update for rubygem-actionview-4_2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-8163 UBUNTU-CVE-2020-8163 2026-10-06T13:16:55.694860+00:00

Affected: Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.