https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:00:14.271851+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2016-2098 CVE-2016-2098 2026-10-02T13:00:14.291745+00:00

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.

 https://cve.radiocsirt.org/vuln/ghsa-78rc-8c29-p45g GHSA-78rc-8c29-p45g — actionpack allows remote code execution via application's unrestricted use of render method 2026-10-02T13:00:14.291795+00:00

Affected: RubyGems: actionpack

Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.