https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:14:28.368904+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2021-avi-115 certfr-2021-avi-115 — De multiples vulnérabilités ont été découvertes dans Ruby on Rails. Elles permettent à un attaquant de provoquer un dén… 2026-10-04T20:14:28.471728+00:00 certfr-2021-avi-115 https://cve.radiocsirt.org/vuln/euvd-2026-23193 EUVD-2026-23193 2026-10-04T20:14:28.471773+00:00 EUVD-2026-23193 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22881 fkie_cve-2021-22881 2026-10-04T20:14:28.471788+00:00

The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.

 https://cve.radiocsirt.org/vuln/ghsa-8877-prq4-9xfw GHSA-8877-prq4-9xfw — Actionpack Open Redirect Vulnerability 2026-10-04T20:14:28.471821+00:00

Affected: RubyGems: actionpack

The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.

 https://cve.radiocsirt.org/vuln/gsd-2021-22881 gsd-2021-22881 2026-10-04T20:14:28.471847+00:00 gsd-2021-22881 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11318-1 openSUSE-SU-2024:11318-1 — ruby2.7-rubygem-actionpack-6.0-6.0.4-1.2 on GA media 2026-10-04T20:14:28.471859+00:00

ruby2.7-rubygem-actionpack-6.0-6.0.4-1.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22881 UBUNTU-CVE-2021-22881 2026-10-04T20:14:28.471882+00:00

Affected: Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails

The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website.