https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:16:00.971269+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-00686 bdu:2020-00686 2026-10-04T20:16:01.119079+00:00 bdu:2020-00686 https://cve.radiocsirt.org/vuln/euvd-2026-68185 EUVD-2026-68185 2026-10-04T20:16:01.119117+00:00 EUVD-2026-68185 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16476 fkie_cve-2018-16476 2026-10-04T20:16:01.119132+00:00

A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.

 https://cve.radiocsirt.org/vuln/ghsa-q2qw-rmrh-vv42 GHSA-q2qw-rmrh-vv42 — Improper Access Control in activejob 2026-10-04T20:16:01.119164+00:00

Affected: RubyGems: activejob

A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have.

 https://cve.radiocsirt.org/vuln/gsd-2018-16476 gsd-2018-16476 2026-10-04T20:16:01.119192+00:00 gsd-2018-16476 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11322-1 openSUSE-SU-2024:11322-1 — ruby2.7-rubygem-activejob-5.2-5.2.6-1.2 on GA media 2026-10-04T20:16:01.119205+00:00

ruby2.7-rubygem-activejob-5.2-5.2.6-1.2 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2019:0600 RHSA-2019:0600 — Red Hat Security Advisory: CloudForms 4.6.9 security, bug fix and enhancement update 2026-10-04T20:16:01.119236+00:00

activejob: Information Exposure through deserialization using GlobalId

 https://cve.radiocsirt.org/vuln/suse-su-2018:3996-1 SUSE-SU-2018:3996-1 — Security update for rubygem-activejob-5_1 2026-10-04T20:16:01.119254+00:00

Security update for rubygem-activejob-5_1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16476 UBUNTU-CVE-2018-16476 2026-10-04T20:16:01.119269+00:00

Affected: Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails

A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.