https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:56:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-00686 bdu:2020-00686 https://cve.radiocsirt.org/vuln/bdu:2020-00686 https://cve.radiocsirt.org/vuln/euvd-2026-68185 EUVD-2026-68185 https://cve.radiocsirt.org/vuln/euvd-2026-68185 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16476 <p>A Broken Access Control vulnerability in Active Job versions &gt;= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.</p> <p>A Broken Access Control vulnerability in Active Job versions &gt;= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-16476 https://cve.radiocsirt.org/vuln/ghsa-q2qw-rmrh-vv42 <p><strong>Affected:</strong> RubyGems: activejob</p> <p>A Broken Access Control vulnerability in Active Job versions &gt;= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have.</p> <p><strong>Affected:</strong> RubyGems: activejob</p> <p>A Broken Access Control vulnerability in Active Job versions &gt;= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have.</p> https://cve.radiocsirt.org/vuln/ghsa-q2qw-rmrh-vv42 https://cve.radiocsirt.org/vuln/gsd-2018-16476 gsd-2018-16476 https://cve.radiocsirt.org/vuln/gsd-2018-16476 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11322-1 <p>ruby2.7-rubygem-activejob-5.2-5.2.6-1.2 on GA media</p> <p>ruby2.7-rubygem-activejob-5.2-5.2.6-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11322-1 https://cve.radiocsirt.org/vuln/rhsa-2019:0600 <p>activejob: Information Exposure through deserialization using GlobalId</p> <p>activejob: Information Exposure through deserialization using GlobalId</p> https://cve.radiocsirt.org/vuln/rhsa-2019:0600 https://cve.radiocsirt.org/vuln/suse-su-2018:3996-1 <p>Security update for rubygem-activejob-5_1</p> <p>Security update for rubygem-activejob-5_1</p> https://cve.radiocsirt.org/vuln/suse-su-2018:3996-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16476 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails</p> <p>A Broken Access Control vulnerability in Active Job versions &gt;= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rails, Ubuntu:Pro:18.04:LTS: rails, Ubuntu:Pro:20.04:LTS: rails, Ubuntu:Pro:22.04:LTS: rails</p> <p>A Broken Access Control vulnerability in Active Job versions &gt;= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been fixed in versions 4.2.11, 5.0.7.1, 5.1.6.1, and 5.2.1.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-16476