https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:23:32.606166+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0692 certfr-2025-avi-0692 — De multiples vulnérabilités ont été découvertes dans Ruby on Rails. Elles permettent à un attaquant de provoquer une ex… 2026-10-04T07:23:32.613592+00:00 certfr-2025-avi-0692 https://cve.radiocsirt.org/vuln/euvd-2026-249815 EUVD-2026-249815 2026-10-04T07:23:32.613631+00:00 EUVD-2026-249815 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55193 fkie_cve-2025-55193 2026-10-04T07:23:32.613646+00:00

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

 https://cve.radiocsirt.org/vuln/ghsa-76r7-hhxj-r776 GHSA-76r7-hhxj-r776 — Active Record logging vulnerable to ANSI escape injection 2026-10-04T07:23:32.613674+00:00

Affected: RubyGems: activerecord

This vulnerability has been assigned the CVE identifier CVE-2025-55193

### Impact The ID passed to `find` or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences.

### Releases The fixed releases are available at the normal locations.

### Credits

Thanks to [lio346](https://hackerone.com/lio346) from Unit 515 of OPSWAT for reporting this vulnerability

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15479-1 openSUSE-SU-2025:15479-1 — ruby3.4-rubygem-activerecord-8.0-8.0.1-2.1 on GA media 2026-10-04T07:23:32.613702+00:00

ruby3.4-rubygem-activerecord-8.0-8.0.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-55193 UBUNTU-CVE-2025-55193 2026-10-04T07:23:32.613719+00:00

Affected: Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails, Ubuntu:24.04:LTS: rails, Ubuntu:25.10: rails, Ubuntu:26.04:LTS: rails

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1822 WID-SEC-W-2025-1822 — Ruby on Rails: Mehrere Schwachstellen 2026-10-04T07:23:32.613746+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ruby on Rails ausnutzen, um beliebigen Programmcode auszuführen und Daten zu manipulieren.