https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:01:58 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-624 certfr-2020-avi-624 https://cve.radiocsirt.org/vuln/certfr-2020-avi-624 https://cve.radiocsirt.org/vuln/euvd-2026-38374 EUVD-2026-38374 https://cve.radiocsirt.org/vuln/euvd-2026-38374 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8264 <p>In actionpack gem &gt;= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This vulnerability is in the Actionable Exceptions middleware.</p> <p>In actionpack gem &gt;= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This vulnerability is in the Actionable Exceptions middleware.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8264 https://cve.radiocsirt.org/vuln/ghsa-35mm-cc6r-8fjp <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>In actionpack gem &gt;= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This vulnerability is in the Actionable Exceptions middleware.</p> <p>Workarounds ----------- Until such time as the patch can be applied, application developers should disable the Actionable Exceptions middleware in their development environment via a line such as this one in their config/environment/development.rb: `config.middleware.delete ActionDispatch::ActionableExceptions`</p> <p><strong>Affected:</strong> RubyGems: actionpack</p> <p>In actionpack gem &gt;= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This vulnerability is in the Actionable Exceptions middleware.</p> <p>Workarounds ----------- Until such time as the patch can be applied, application developers should disable the Actionable Exceptions middleware in their development environment via a line such as this one in their config/environment/development.rb: `config.middleware.delete ActionDispatch::ActionableExceptions`</p> https://cve.radiocsirt.org/vuln/ghsa-35mm-cc6r-8fjp https://cve.radiocsirt.org/vuln/gsd-2020-8264 gsd-2020-8264 https://cve.radiocsirt.org/vuln/gsd-2020-8264 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11313-1 <p>ruby2.7-rubygem-actioncable-6.0-6.0.4-1.2 on GA media</p> <p>ruby2.7-rubygem-actioncable-6.0-6.0.4-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11313-1