{"id":148947,"name":"actionpack","ecosystem":"rubygems","description":"Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.","homepage":"https://rubyonrails.org","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/rails/rails","keywords_array":[],"namespace":null,"versions_count":520,"first_release_published_at":"2009-07-25T18:36:20.000Z","latest_release_published_at":"2026-09-24T14:21:32.114Z","latest_release_number":"8.1.4","latest_published_release_number":"8.1.4","last_synced_at":"2026-10-28T09:25:55.215Z","created_at":"2022-04-05T16:21:52.385Z","updated_at":"2026-10-29T08:29:40.154Z","registry_url":"https://rubygems.org/gems/actionpack","install_command":"gem install actionpack -s https://rubygems.org","documentation_url":"http://www.rubydoc.info/gems/actionpack/","metadata":{"funding":null},"repo_metadata":{"id":390886,"uuid":"8514","full_name":"rails/rails","owner":"rails","description":"Ruby on Rails","archived":false,"fork":false,"pushed_at":"2026-10-23T16:32:10.000Z","size":292881,"stargazers_count":58851,"open_issues_count":1712,"forks_count":25223,"subscribers_count":2340,"default_branch":"main","last_synced_at":"2026-10-23T18:55:57.197Z","etag":null,"topics":["activejob","activerecord","framework","html","mvc","rails","ruby"],"latest_commit_sha":null,"homepage":"https://rubyonrails.org","language":"Ruby","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rails.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"MIT-LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":".github/security.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2008-04-11T02:19:47.000Z","updated_at":"2026-10-23T16:32:24.000Z","dependencies_parsed_at":"2026-10-02T08:21:52.953Z","dependency_job_id":null,"html_url":"https://github.com/rails/rails","commit_stats":{"total_commits":70043,"total_committers":6052,"mean_commits":"11.573529411764707","dds":0.9368816298559456,"last_synced_commit":"be9aa73dd72f1097be5d45a58d7912447a266bd1"},"previous_names":["8514"],"tags_count":554,"template":false,"template_full_name":null,"purl":"pkg:github/rails/rails","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rails","download_url":"https://codeload.github.com/rails/rails/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/sbom","scorecard":{"id":759285,"data":{"date":"2025-08-11","repo":{"name":"github.com/rails/rails","commit":"4f595868f95c63849653446e5ab7a96f191974d3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.1,"checks":[{"name":"Code-Review","score":8,"reason":"Found 16/19 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/security.md:1","Info: Found linked content: .github/security.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/security.md:1","Info: Found text in security policy: .github/security.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/devcontainer-smoke-test.yml:11","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/devcontainer-smoke-test.yml:12","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:10","Info: topLevel 'contents' permission set to 'read': .github/workflows/devcontainer-shellcheck.yml:12","Warn: no topLevel permission defined: .github/workflows/devcontainer-smoke-test.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/rail_inspector.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/rails-new-docker.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/rails_releaser_tests.yml:12","Warn: no topLevel permission defined: .github/workflows/release.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: MIT-LICENSE:0","Info: FSF or OSI recognized license: MIT License: MIT-LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'","Warn: branch 'main' does not require approvers","Warn: codeowners review is not required on branch 'main'","Warn: 'up-to-date branches' is disabled on branch 'main'","Info: status check found to merge onto on branch 'main'","Warn: PRs are not required to make changes on branch 'main'; or we don't have data to detect it.If you think it might be the latter, make sure to run Scorecard with a PAT or use Repo Rules (that are always public) instead of Branch Protection settings"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: railties/lib/rails/generators/rails/app/templates/Dockerfile.tt:17-20","Info: Possibly incomplete results: error parsing shell code: a command can only contain words and redirects; encountered (: railties/lib/rails/generators/rails/app/templates/Dockerfile.tt:33-35","Info: Possibly incomplete results: error parsing shell code: \u003e must be followed by a word: railties/lib/rails/generators/rails/app/templates/Dockerfile.tt:65-67","Info: Possibly incomplete results: error parsing shell code: \u003e must be followed by a word: railties/lib/rails/generators/rails/app/templates/docker-entrypoint.tt:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devcontainer-shellcheck.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/devcontainer-shellcheck.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devcontainer-smoke-test.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/devcontainer-smoke-test.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/devcontainer-smoke-test.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/devcontainer-smoke-test.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rail_inspector.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/rail_inspector.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/rail_inspector.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/rail_inspector.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rails-new-docker.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/rails-new-docker.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/rails-new-docker.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/rails-new-docker.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rails_releaser_tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/rails_releaser_tests.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/rails_releaser_tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/rails_releaser_tests.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/rails/rails/release.yml/main?enable=pin","Warn: containerImage not pinned by hash: .devcontainer/Dockerfile:5","Warn: containerImage not pinned by hash: railties/lib/rails/generators/rails/app/templates/Dockerfile.tt:12","Warn: containerImage not pinned by hash: railties/lib/rails/generators/rails/app/templates/Dockerfile.tt:31","Warn: containerImage not pinned by hash: railties/lib/rails/generators/rails/app/templates/Dockerfile.tt:106","Warn: containerImage not pinned by hash: railties/lib/rails/generators/rails/devcontainer/templates/devcontainer/Dockerfile.tt:3","Warn: containerImage not pinned by hash: railties/test/fixtures/Dockerfile.test:5","Warn: containerImage not pinned by hash: railties/test/fixtures/Dockerfile.test:21","Warn: containerImage not pinned by hash: railties/test/fixtures/Dockerfile.test:42","Warn: npmCommand not pinned by hash: railties/lib/rails/generators/rails/app/templates/Dockerfile.tt:49-52","Warn: downloadThenRun not pinned by hash: railties/lib/rails/generators/rails/app/templates/Dockerfile.tt:60","Info:   0 out of   7 GitHub-owned GitHubAction dependencies pinned","Info:   6 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 containerImage dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned","Info:   0 out of   1 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"26 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-7fc5-f82f-cx69","Warn: Project is vulnerable to: GHSA-j3g3-5qv5-52mj","Warn: Project is vulnerable to: GHSA-353f-x4gh-cqq8","Warn: Project is vulnerable to: GHSA-22h5-pq3x-2gf2","Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc","Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3","Warn: Project is vulnerable to: GHSA-6vx4-v2jw-qwqh","Warn: Project is vulnerable to: GHSA-j386-3444-qgwg","Warn: Project is vulnerable to: GHSA-mcrw-746g-9q8h","Warn: Project is vulnerable to: GHSA-3329-pjwv-fjpg","Warn: Project is vulnerable to: GHSA-p6j9-7xhc-rhwp","Warn: Project is vulnerable to: GHSA-89gv-h8wf-cg8r","Warn: Project is vulnerable to: GHSA-gcv8-gh4r-25x6","Warn: Project is vulnerable to: GHSA-gmv4-r438-p67f","Warn: Project is vulnerable to: GHSA-8h2f-7jc4-7m3m","Warn: Project is vulnerable to: GHSA-3vjf-82ff-p4r3","Warn: Project is vulnerable to: GHSA-g694-m8vq-gv9h"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-22T22:49:27.036Z","repository_id":390886,"created_at":"2025-08-22T22:49:27.036Z","updated_at":"2025-08-22T22:49:27.036Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":345082042,"owners_count":38479103,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-23T02:00:05.958Z","response_time":105,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"rails","name":"Ruby on Rails","uuid":"4223","kind":"organization","description":"","email":null,"website":"https://rubyonrails.org/","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/4223?v=4","repositories_count":130,"last_synced_at":"2026-10-23T18:51:28.225Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/rails","funding_links":[],"total_stars":127619,"followers":2742,"following":0,"created_at":"2022-11-02T16:17:13.297Z","updated_at":"2026-10-23T18:51:28.238Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rails","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rails/repositories"},"tags":[{"name":"v7.2.4","sha":"48e05e6355f9c617758df1ee4f8c3f555d0f3d74","kind":"tag","published_at":"2026-09-24T16:28:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.4","html_url":"https://github.com/rails/rails/releases/tag/v7.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.4/manifests"},{"name":"v8.1.4","sha":"c3466ea00d7121798e3aa3144ffdf7174b81d8cb","kind":"tag","published_at":"2026-09-24T14:19:22.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.1.4","html_url":"https://github.com/rails/rails/releases/tag/v8.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.4/manifests"},{"name":"v8.0.5.1","sha":"beef74d4cebf42a01cd1df79e9de00df725b64fd","kind":"tag","published_at":"2026-07-29T15:07:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.5.1","html_url":"https://github.com/rails/rails/releases/tag/v8.0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.5.1/manifests"},{"name":"v7.2.3.2","sha":"8ec292f5f95020b1e36ed68436fb46fe41302699","kind":"tag","published_at":"2026-07-29T15:05:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.3.2","html_url":"https://github.com/rails/rails/releases/tag/v7.2.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.3.2/manifests"},{"name":"v8.1.3.1","sha":"3989ebf3473d71e4ceca28154b0b57b5bf22db24","kind":"tag","published_at":"2026-07-29T14:59:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.1.3.1","html_url":"https://github.com/rails/rails/releases/tag/v8.1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.3.1/manifests"},{"name":"v8.1.3","sha":"fa8f0812160665bff083a089d2bb2fc1817ea03e","kind":"tag","published_at":"2026-03-24T20:24:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.1.3","html_url":"https://github.com/rails/rails/releases/tag/v8.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.3/manifests"},{"name":"v8.0.5","sha":"eb126bb140127d3589ad9be093a845e24fc4f475","kind":"tag","published_at":"2026-03-24T20:14:27.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.5","html_url":"https://github.com/rails/rails/releases/tag/v8.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.5/manifests"},{"name":"v8.1.2.1","sha":"1db4b89687cc18311fc3f92623136705df24e671","kind":"tag","published_at":"2026-03-23T19:42:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.1.2.1","html_url":"https://github.com/rails/rails/releases/tag/v8.1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.2.1/manifests"},{"name":"v8.0.4.1","sha":"a79efed95797b196575a98845dc989e3106a9acb","kind":"tag","published_at":"2026-03-23T19:37:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.4.1","html_url":"https://github.com/rails/rails/releases/tag/v8.0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.4.1/manifests"},{"name":"v7.2.3.1","sha":"ba76fca032a66f3716ca8a661c9ddb006acaf885","kind":"tag","published_at":"2026-03-23T19:31:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.3.1","html_url":"https://github.com/rails/rails/releases/tag/v7.2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.3.1/manifests"},{"name":"v8.1.2","sha":"d7c8ae65b7045490965218a994c300aea8dbb079","kind":"tag","published_at":"2026-01-08T20:16:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.1.2","html_url":"https://github.com/rails/rails/releases/tag/v8.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.2/manifests"},{"name":"v8.1.1","sha":"90a1eaa1b30ba1f2d524e197460e549c03cf5698","kind":"tag","published_at":"2025-10-28T23:46:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.1.1","html_url":"https://github.com/rails/rails/releases/tag/v8.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.1/manifests"},{"name":"v8.0.4","sha":"624fe3cdb9ab774ff598af29f408425178da6677","kind":"tag","published_at":"2025-10-28T23:43:12.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.4","html_url":"https://github.com/rails/rails/releases/tag/v8.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.4/manifests"},{"name":"v7.2.3","sha":"bb2bdef2925433a0c5db31b873f9faddf2e2e65d","kind":"tag","published_at":"2025-10-28T23:24:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.3","html_url":"https://github.com/rails/rails/releases/tag/v7.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.3/manifests"},{"name":"v7.1.6","sha":"ffcbf6f205363f8c2fb3e9834bc86690dd59f1cb","kind":"tag","published_at":"2025-10-28T23:19:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.6","html_url":"https://github.com/rails/rails/releases/tag/v7.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.6/manifests"},{"name":"v7.0.10","sha":"f4321f78fe567fd29dd0a0fb5cb17af68efd36bb","kind":"tag","published_at":"2025-10-28T23:12:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.10","html_url":"https://github.com/rails/rails/releases/tag/v7.0.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.10/manifests"},{"name":"v7.0.9","sha":"1a5613e6281d7d902f558a3b0ee63ffa25ddb8a0","kind":"tag","published_at":"2025-10-28T23:02:11.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.9","html_url":"https://github.com/rails/rails/releases/tag/v7.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.9/manifests"},{"name":"v8.1.0","sha":"1cdd190a25e483b65f1f25bbd0f13a25d696b461","kind":"tag","published_at":"2025-10-22T00:33:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.1.0","html_url":"https://github.com/rails/rails/releases/tag/v8.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.0/manifests"},{"name":"v8.1.0.rc1","sha":"4720fe9c00605d6ad2d50904e98a4d5522ffbce2","kind":"tag","published_at":"2025-10-15T00:50:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.1.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v8.1.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.1.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.0.rc1/manifests"},{"name":"v8.0.3","sha":"529f933fc8b13114d308dd0752f76a9e293c8537","kind":"tag","published_at":"2025-09-22T22:17:28.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.3","html_url":"https://github.com/rails/rails/releases/tag/v8.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.3/manifests"},{"name":"v8.1.0.beta1","sha":"80827ca7ff33ca3026f2c74fe8249ccc6f513318","kind":"tag","published_at":"2025-09-04T12:28:48.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.1.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v8.1.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.1.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.1.0.beta1/manifests"},{"name":"v8.0.2.1","sha":"b0c813bc7b61c71dd21ee3a6c6210f6d14030f71","kind":"tag","published_at":"2025-08-13T20:38:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.2.1","html_url":"https://github.com/rails/rails/releases/tag/v8.0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.2.1/manifests"},{"name":"v7.2.2.2","sha":"9204eb520c2784ca7a1da9a4884aad21c59088fd","kind":"tag","published_at":"2025-08-13T20:33:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.2.2","html_url":"https://github.com/rails/rails/releases/tag/v7.2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.2.2/manifests"},{"name":"v7.1.5.2","sha":"ddb56de25997491b57868d3a119b6aa3cd31ad4b","kind":"tag","published_at":"2025-08-13T20:25:09.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.5.2","html_url":"https://github.com/rails/rails/releases/tag/v7.1.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.5.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.5.2/manifests"},{"name":"v8.0.2","sha":"3235827585d87661942c91bc81f64f56d710f0b2","kind":"tag","published_at":"2025-03-12T02:54:11.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.2","html_url":"https://github.com/rails/rails/releases/tag/v8.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.2/manifests"},{"name":"v8.0.1","sha":"cf6ff17e9a3c6c1139040b519a341f55f0be16cf","kind":"tag","published_at":"2024-12-13T19:54:18.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.1","html_url":"https://github.com/rails/rails/releases/tag/v8.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.1/manifests"},{"name":"v8.0.0.1","sha":"a993c27a50395e727872600b5669976ff0a272e7","kind":"tag","published_at":"2024-12-10T21:45:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.1","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.1/manifests"},{"name":"v7.2.2.1","sha":"33beb0a38db1c058123a8e3cc298cad918adfe32","kind":"tag","published_at":"2024-12-10T21:40:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.2.1","html_url":"https://github.com/rails/rails/releases/tag/v7.2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.2.1/manifests"},{"name":"v7.1.5.1","sha":"14c115b120ed089331ff3dc13f36bd9129ced33d","kind":"tag","published_at":"2024-12-10T21:25:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.5.1","html_url":"https://github.com/rails/rails/releases/tag/v7.1.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.5.1/manifests"},{"name":"v7.0.8.7","sha":"778eab826538be6da355d848aecaea2245e3b8ce","kind":"tag","published_at":"2024-12-10T21:16:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.8.7","html_url":"https://github.com/rails/rails/releases/tag/v7.0.8.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.8.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.7/manifests"},{"name":"v8.0.0","sha":"dd8f7185faeca6ee968a6e9367f6d8601a83b8db","kind":"tag","published_at":"2024-11-07T22:24:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0/manifests"},{"name":"v7.2.2","sha":"d0dcb8fa6073a0c4d42600c15e82e3bb386b27d3","kind":"tag","published_at":"2024-10-31T01:43:10.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.2","html_url":"https://github.com/rails/rails/releases/tag/v7.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.2/manifests"},{"name":"v7.1.5","sha":"8984f4c4982f5c94bd6fb8ada42d7418bc403076","kind":"tag","published_at":"2024-10-31T01:14:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.5","html_url":"https://github.com/rails/rails/releases/tag/v7.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.5/manifests"},{"name":"v8.0.0.rc2","sha":"6283314df19ded7074f1fe37a8b0dbbad141e386","kind":"tag","published_at":"2024-10-30T00:30:55.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.rc2/manifests"},{"name":"v7.2.1.2","sha":"7750d64a65e5b2641d87ef45e6e65ace193d9a27","kind":"tag","published_at":"2024-10-23T22:32:53.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.1.2","html_url":"https://github.com/rails/rails/releases/tag/v7.2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.1.2/manifests"},{"name":"v7.1.4.2","sha":"e52d670dba4861a081576e5ccc5db7015af3003c","kind":"tag","published_at":"2024-10-23T22:27:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.4.2","html_url":"https://github.com/rails/rails/releases/tag/v7.1.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.4.2/manifests"},{"name":"v7.0.8.6","sha":"bc979c5cf4e29e2aba95b7b13ca53e7a02fddee2","kind":"tag","published_at":"2024-10-23T22:21:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.8.6","html_url":"https://github.com/rails/rails/releases/tag/v7.0.8.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.8.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.6/manifests"},{"name":"v6.1.7.10","sha":"86864c2f6661d3aa93b07f833b2900d241568cb7","kind":"tag","published_at":"2024-10-23T21:56:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.10","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.10/manifests"},{"name":"v8.0.0.rc1","sha":"35b3c7f12b3f13f80cacf7abde2fc5a9c0abea7b","kind":"tag","published_at":"2024-10-19T01:38:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.rc1/manifests"},{"name":"v6.1.7.9","sha":"b2fbbfbcaa3d662c68a9ee21ab6cf95eccc2b4ec","kind":"tag","published_at":"2024-10-15T21:23:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.9","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.9/manifests"},{"name":"v7.2.1.1","sha":"a1f6a13f691e0929d40b7e1b1e0d31aa69778128","kind":"tag","published_at":"2024-10-15T20:44:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.1.1","html_url":"https://github.com/rails/rails/releases/tag/v7.2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.1.1/manifests"},{"name":"v7.1.4.1","sha":"5b5f0da552f62e85e31e2d747d52aed2a3133f48","kind":"tag","published_at":"2024-10-15T20:36:32.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.4.1","html_url":"https://github.com/rails/rails/releases/tag/v7.1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.4.1/manifests"},{"name":"v7.0.8.5","sha":"f61f4ef957f80e1668797fce8a2393f3edb7ed76","kind":"tag","published_at":"2024-10-15T20:19:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.8.5","html_url":"https://github.com/rails/rails/releases/tag/v7.0.8.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.8.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.5/manifests"},{"name":"v8.0.0.beta1","sha":"72bc36fb47aa3a9b10149ecefc1f344d7b028d79","kind":"tag","published_at":"2024-09-26T15:04:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.beta1/manifests"},{"name":"v8.0.0.alpha9","sha":"0fe9dc6c2bb0bdbc23d3874f112e15cacabe72f3","kind":"tag","published_at":"2024-09-25T18:14:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.alpha9","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.alpha9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.alpha9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha9/manifests"},{"name":"v8.0.0.alpha8","sha":"7c9855125e8bdf5c82bdde581b1dfaf636aba5b7","kind":"tag","published_at":"2024-09-18T21:08:33.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.alpha8","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.alpha8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.alpha8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha8/manifests"},{"name":"v8.0.0.alpha7","sha":"34e9d47d8e53786efe4b64e4513aa78eaea757b0","kind":"tag","published_at":"2024-09-18T05:04:18.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.alpha7","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.alpha7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.alpha7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha7/manifests"},{"name":"v8.0.0.alpha6","sha":"668c51e8761d38d798a0a4973549042ee41995c5","kind":"tag","published_at":"2024-09-18T05:01:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.alpha6","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.alpha6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.alpha6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha6/manifests"},{"name":"v8.0.0.alpha5","sha":"6b21e48541331054120ec617cf455c0d13a51539","kind":"tag","published_at":"2024-09-18T04:57:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.alpha5","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.alpha5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.alpha5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha5/manifests"},{"name":"v8.0.0.alpha4","sha":"aa5479e8188c303c3acbb30b1d490c4e473e7ce4","kind":"tag","published_at":"2024-09-18T03:37:30.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.alpha4","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.alpha4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.alpha4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha4/manifests"},{"name":"v8.0.0.alpha3","sha":"e14521de210a9b5ab8fbdd431110128b78fb1e12","kind":"tag","published_at":"2024-09-17T04:34:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.alpha3","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.alpha3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.alpha3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha3/manifests"},{"name":"v8.0.0.alpha2","sha":"f270115dd1c441aa672cb7054598551de80c1ec7","kind":"tag","published_at":"2024-09-17T04:30:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.alpha2","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.alpha2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.alpha2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha2/manifests"},{"name":"v8.0.0.alpha1","sha":"2c68c89238628373473eb8cb2bf6f853a9cda2b1","kind":"tag","published_at":"2024-09-17T04:23:53.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v8.0.0.alpha1","html_url":"https://github.com/rails/rails/releases/tag/v8.0.0.alpha1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v8.0.0.alpha1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v8.0.0.alpha1/manifests"},{"name":"v7.1.4","sha":"6f57590388ca38ed2b83bc1207a8be13a9ba2aef","kind":"tag","published_at":"2024-08-22T21:26:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.4","html_url":"https://github.com/rails/rails/releases/tag/v7.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.4/manifests"},{"name":"v7.2.1","sha":"a11f0a63673d274c59c69c2688c63ba303b86193","kind":"tag","published_at":"2024-08-22T19:44:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.1","html_url":"https://github.com/rails/rails/releases/tag/v7.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.1/manifests"},{"name":"v7.2.0","sha":"fb6c4305939da06efdf2893d99130e7829c53e8b","kind":"tag","published_at":"2024-08-09T23:25:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.0","html_url":"https://github.com/rails/rails/releases/tag/v7.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0/manifests"},{"name":"v7.2.0.rc1","sha":"41d50f4bb11a1b1a910b38a3beefa97cafb52a2a","kind":"tag","published_at":"2024-08-06T17:00:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v7.2.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0.rc1/manifests"},{"name":"v0.8.0","sha":"7050bba8984dca2ae8c52b1d4cc616149f5c9d91","kind":"tag","published_at":"2024-08-01T16:10:39.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.8.0","html_url":"https://github.com/rails/rails/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.8.0/manifests"},{"name":"v0.8.5","sha":"fbf913fafea1072cb15c0a635b276dab5dfefe63","kind":"tag","published_at":"2024-08-01T16:10:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.8.5","html_url":"https://github.com/rails/rails/releases/tag/v0.8.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.8.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.8.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.8.5/manifests"},{"name":"v0.7.0","sha":"3cd56dccf840c97059e242ab616c13a84393a24c","kind":"tag","published_at":"2024-08-01T16:09:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.7.0","html_url":"https://github.com/rails/rails/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.7.0/manifests"},{"name":"v0.6.5","sha":"11665ed67989e2ebb4ef38fa0781514a649b7ef2","kind":"tag","published_at":"2024-08-01T16:09:09.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.6.5","html_url":"https://github.com/rails/rails/releases/tag/v0.6.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.6.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.6.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.6.5/manifests"},{"name":"v0.6.0","sha":"be81c4351b3e3af81c001d157541c4bf58a2f94b","kind":"tag","published_at":"2024-08-01T16:08:53.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.6.0","html_url":"https://github.com/rails/rails/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.6.0/manifests"},{"name":"v0.5.7","sha":"7b7799aec70f1b31db9fcc389b26ae61ef44d9bc","kind":"tag","published_at":"2024-08-01T16:08:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.5.7","html_url":"https://github.com/rails/rails/releases/tag/v0.5.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.5.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.5.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.5.7/manifests"},{"name":"v0.5.6","sha":"ec06ea363252e2251a93f7db756f2e9421ae2c78","kind":"tag","published_at":"2024-08-01T16:08:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.5.6","html_url":"https://github.com/rails/rails/releases/tag/v0.5.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.5.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.5.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.5.6/manifests"},{"name":"v0.5.5","sha":"42042de1e2b8e7023b807ec105d9b479f9f457f1","kind":"tag","published_at":"2024-08-01T16:07:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.5.5","html_url":"https://github.com/rails/rails/releases/tag/v0.5.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.5.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.5.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.5.5/manifests"},{"name":"v0.5.0","sha":"feba2817693536f24cd3848f3cbdc28735806261","kind":"tag","published_at":"2024-08-01T16:07:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.5.0","html_url":"https://github.com/rails/rails/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.5.0/manifests"},{"name":"v7.2.0.beta3","sha":"9b63450fe40749d2481b6b6b3e0a7c711750e2a0","kind":"tag","published_at":"2024-07-11T15:19:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.0.beta3","html_url":"https://github.com/rails/rails/releases/tag/v7.2.0.beta3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.0.beta3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0.beta3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0.beta3/manifests"},{"name":"v7.2.0.beta2","sha":"b752c38e81a310c1aaca78c7cdd1784009ea189a","kind":"tag","published_at":"2024-06-04T18:14:30.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.0.beta2","html_url":"https://github.com/rails/rails/releases/tag/v7.2.0.beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.0.beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0.beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0.beta2/manifests"},{"name":"v7.1.3.4","sha":"19eebf6d33dd15a0172e3ed2481bec57a89a2404","kind":"tag","published_at":"2024-06-04T18:00:18.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.3.4","html_url":"https://github.com/rails/rails/releases/tag/v7.1.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3.4/manifests"},{"name":"v7.0.8.4","sha":"ec7f25368dff972b014fad4294c62181fb26c584","kind":"tag","published_at":"2024-06-04T17:56:37.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.8.4","html_url":"https://github.com/rails/rails/releases/tag/v7.0.8.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.8.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.4/manifests"},{"name":"v6.1.7.8","sha":"e39361ab9062e23dcef5aeaf376fc48b106da66b","kind":"tag","published_at":"2024-06-04T17:55:28.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.8","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.8/manifests"},{"name":"v7.2.0.beta1","sha":"9098f535b2accef27c6c284dede119c936c44595","kind":"tag","published_at":"2024-05-29T23:37:41.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.2.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v7.2.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.2.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.2.0.beta1/manifests"},{"name":"v7.0.8.3","sha":"08bc3ce3e0930d3509fce12127942172917a5c03","kind":"tag","published_at":"2024-05-17T19:52:17.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.8.3","html_url":"https://github.com/rails/rails/releases/tag/v7.0.8.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.8.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.3/manifests"},{"name":"v7.1.3.3","sha":"747a03ba7722b6f0a7ce42e86cea83cf07a2e6ef","kind":"tag","published_at":"2024-05-16T19:20:53.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.3.3","html_url":"https://github.com/rails/rails/releases/tag/v7.1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3.3/manifests"},{"name":"v7.0.8.2","sha":"7c8d2a1d6e0a22c8e96ecae4bdea8c2b6e347168","kind":"tag","published_at":"2024-05-16T18:57:43.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.8.2","html_url":"https://github.com/rails/rails/releases/tag/v7.0.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.8.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.2/manifests"},{"name":"v7.1.3.2","sha":"6f0d1ad14b92b9f5906e44740fce8b4f1c7075dc","kind":"tag","published_at":"2024-02-21T21:45:37.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.3.2","html_url":"https://github.com/rails/rails/releases/tag/v7.1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3.2/manifests"},{"name":"v7.1.3.1","sha":"d73ed958dc91d6b8cbb0bef7b4cdcfc013bd876f","kind":"tag","published_at":"2024-02-21T18:46:05.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.3.1","html_url":"https://github.com/rails/rails/releases/tag/v7.1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3.1/manifests"},{"name":"v7.0.8.1","sha":"506462ab13755d9f024e1ddbfc8c58d73e7a1bce","kind":"tag","published_at":"2024-02-21T18:42:34.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.8.1","html_url":"https://github.com/rails/rails/releases/tag/v7.0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8.1/manifests"},{"name":"v6.1.7.7","sha":"ac87f58207cff18880593263be9d83456aa3a2ef","kind":"tag","published_at":"2024-02-21T18:38:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.7","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.7/manifests"},{"name":"v7.1.3","sha":"36c1591bcb5e0ee3084759c7f42a706fe5bb7ca7","kind":"tag","published_at":"2024-01-16T22:53:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.3","html_url":"https://github.com/rails/rails/releases/tag/v7.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.3/manifests"},{"name":"v7.1.2","sha":"6b93fff8af32ef5e91f4ec3cfffb081d0553faf0","kind":"tag","published_at":"2023-11-10T21:49:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.2","html_url":"https://github.com/rails/rails/releases/tag/v7.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.2/manifests"},{"name":"v7.1.1","sha":"23938052acd773fa24068debe56cd892cbf8d868","kind":"tag","published_at":"2023-10-11T22:16:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.1","html_url":"https://github.com/rails/rails/releases/tag/v7.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.1/manifests"},{"name":"v7.1.0","sha":"d39db5d1891f7509cde2efc425c9d69bbb77e670","kind":"tag","published_at":"2023-10-05T08:05:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.0","html_url":"https://github.com/rails/rails/releases/tag/v7.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.0/manifests"},{"name":"v7.1.0.rc2","sha":"8340f8ffdc6279c566b2b37c59674ecb158b4618","kind":"tag","published_at":"2023-10-01T21:58:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v7.1.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.0.rc2/manifests"},{"name":"v7.1.0.rc1","sha":"b69de9967a328c0cfdc0650f044c0ebb2e87407a","kind":"tag","published_at":"2023-09-27T03:59:58.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v7.1.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.0.rc1/manifests"},{"name":"v7.1.0.beta1","sha":"699dfdb42635faf6d40ff2405b2f0a615b1c54ed","kind":"tag","published_at":"2023-09-13T00:36:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.1.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v7.1.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.1.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.1.0.beta1/manifests"},{"name":"v7.0.8","sha":"fc734f28e65ef8829a1a939ee6702c1f349a1d5a","kind":"tag","published_at":"2023-09-09T19:10:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.8","html_url":"https://github.com/rails/rails/releases/tag/v7.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.8/manifests"},{"name":"v7.0.7.2","sha":"3668b4b5978822f1e6311c7fd7a32f58daee136a","kind":"tag","published_at":"2023-08-22T20:10:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.7.2","html_url":"https://github.com/rails/rails/releases/tag/v7.0.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.7.2/manifests"},{"name":"v6.1.7.6","sha":"56bcc0abd3c9a6b09469e9428f6eea0dd77c2294","kind":"tag","published_at":"2023-08-22T20:07:39.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.6","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.6/manifests"},{"name":"v7.0.7.1","sha":"c92caefc2bdf856845a72b8608d5603b330e8c3e","kind":"tag","published_at":"2023-08-22T17:20:17.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.7.1","html_url":"https://github.com/rails/rails/releases/tag/v7.0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.7.1/manifests"},{"name":"v6.1.7.5","sha":"3a1b6150a9b7619fb6d020b61c3b8f8d493142b0","kind":"tag","published_at":"2023-08-22T17:15:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.5","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.5/manifests"},{"name":"v7.0.7","sha":"522c86f35ccc80453ed9fb6ca8b394db321f9a69","kind":"tag","published_at":"2023-08-09T23:56:09.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.7","html_url":"https://github.com/rails/rails/releases/tag/v7.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.7/manifests"},{"name":"v7.0.6","sha":"593893c901f87b4ed205751f72df41519b4d2da3","kind":"tag","published_at":"2023-06-29T20:53:23.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.6","html_url":"https://github.com/rails/rails/releases/tag/v7.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.6/manifests"},{"name":"v7.0.5.1","sha":"cdd14ce1f5196e4bd98df42f89a1cd36ba9d4bee","kind":"tag","published_at":"2023-06-26T21:35:35.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.5.1","html_url":"https://github.com/rails/rails/releases/tag/v7.0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.5.1/manifests"},{"name":"v6.1.7.4","sha":"7d949d7c81d2ec3c6d21525ebb08c85f3f174b74","kind":"tag","published_at":"2023-06-26T21:31:30.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.4","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.4/manifests"},{"name":"v7.0.5","sha":"e88857bbb9d4e1dd64555c34541301870de4a45b","kind":"tag","published_at":"2023-05-24T18:56:41.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.5","html_url":"https://github.com/rails/rails/releases/tag/v7.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.5/manifests"},{"name":"v7.0.4.3","sha":"c15ee6e7b5065db3c46afa1f025b8e45f443604e","kind":"tag","published_at":"2023-03-13T18:53:09.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.4.3","html_url":"https://github.com/rails/rails/releases/tag/v7.0.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.4.3/manifests"},{"name":"v6.1.7.3","sha":"f09dc7c4c2e8b9375345d443c230cb8d78ad6a18","kind":"tag","published_at":"2023-03-13T18:48:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.3","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.3/manifests"},{"name":"v6.1.7.2","sha":"f0c5e60aed8bdce96c385cad05b1e34d7d757038","kind":"tag","published_at":"2023-01-25T03:23:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.2","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.2/manifests"},{"name":"v7.0.4.2","sha":"7c70791470fc517deb7c640bead9f1b47efb5539","kind":"tag","published_at":"2023-01-25T03:13:57.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.4.2","html_url":"https://github.com/rails/rails/releases/tag/v7.0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.4.2/manifests"},{"name":"v7.0.4.1","sha":"23e0345fe900dfd7edd6e8e5a7a6bd54b2a7d2ed","kind":"tag","published_at":"2023-01-17T18:55:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.4.1","html_url":"https://github.com/rails/rails/releases/tag/v7.0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.4.1/manifests"},{"name":"v6.1.7.1","sha":"c443466a99f8ed951605fb4993a01de5e41349a4","kind":"tag","published_at":"2023-01-17T18:54:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7.1","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7.1/manifests"},{"name":"v6.0.6.1","sha":"28bb76d3efc39b2ef663dfe2346f7c2621343cd6","kind":"tag","published_at":"2023-01-17T18:52:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.6.1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.6.1/manifests"},{"name":"v7.0.4","sha":"8015c2c2cf5c8718449677570f372ceb01318a32","kind":"tag","published_at":"2022-09-09T18:42:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.4","html_url":"https://github.com/rails/rails/releases/tag/v7.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.4/manifests"},{"name":"v6.1.7","sha":"9ab33753b6bab1809fc73d35b98a5c1d0c96ba1b","kind":"tag","published_at":"2022-09-09T18:38:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.7","html_url":"https://github.com/rails/rails/releases/tag/v6.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.7/manifests"},{"name":"v6.0.6","sha":"91cf62e7b43c33ae6263adf3d7563da9b68ff21d","kind":"tag","published_at":"2022-09-09T18:31:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.6","html_url":"https://github.com/rails/rails/releases/tag/v6.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.6/manifests"},{"name":"v7.0.3.1","sha":"04972d9b9ef60796dc8f0917817b5392d61fcf09","kind":"tag","published_at":"2022-07-12T17:31:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.3.1","html_url":"https://github.com/rails/rails/releases/tag/v7.0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.3.1/manifests"},{"name":"v6.1.6.1","sha":"dc1242fd5a4d91e63846ab552a07e19ebf8716ac","kind":"tag","published_at":"2022-07-12T17:29:22.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.6.1","html_url":"https://github.com/rails/rails/releases/tag/v6.1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.6.1/manifests"},{"name":"v6.0.5.1","sha":"eed417637b594b33b3b58b08dd41daa10c57e083","kind":"tag","published_at":"2022-07-12T17:27:57.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.5.1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.5.1/manifests"},{"name":"v5.2.8.1","sha":"8030cff808657faa44828de001cd3b80364597de","kind":"tag","published_at":"2022-07-12T17:26:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.8.1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.8.1/manifests"},{"name":"v5.2.8","sha":"26521331e5923a0c50fa50984d2f924e5f26c50b","kind":"tag","published_at":"2022-05-09T13:57:53.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.8","html_url":"https://github.com/rails/rails/releases/tag/v5.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.8/manifests"},{"name":"v6.0.5","sha":"433115554d3ea0b4dab9df99548c47707cadb20d","kind":"tag","published_at":"2022-05-09T13:49:58.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.5","html_url":"https://github.com/rails/rails/releases/tag/v6.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.5/manifests"},{"name":"v6.1.6","sha":"147557dc16a5bd8bab96f999f359a570232e1873","kind":"tag","published_at":"2022-05-09T13:44:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.6","html_url":"https://github.com/rails/rails/releases/tag/v6.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.6/manifests"},{"name":"v7.0.3","sha":"3872bc0e54d32e8bf3a6299b0bfe173d94b072fc","kind":"tag","published_at":"2022-05-09T13:35:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.3","html_url":"https://github.com/rails/rails/releases/tag/v7.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.3/manifests"},{"name":"v7.0.2.4","sha":"3520cc77df1b52a6c808083214b583c769e9a4b2","kind":"tag","published_at":"2022-04-26T19:32:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.2.4","html_url":"https://github.com/rails/rails/releases/tag/v7.0.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2.4/manifests"},{"name":"v6.1.5.1","sha":"e2efc667dea886e71c33e3837048e34b7a1fe470","kind":"tag","published_at":"2022-04-26T19:30:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.5.1","html_url":"https://github.com/rails/rails/releases/tag/v6.1.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.5.1/manifests"},{"name":"v6.0.4.8","sha":"27a5ec76eed1e5d0bc5649b0e92097267c0b4338","kind":"tag","published_at":"2022-04-26T19:26:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.4.8","html_url":"https://github.com/rails/rails/releases/tag/v6.0.4.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.4.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.8/manifests"},{"name":"v5.2.7.1","sha":"b290430faf946b298352196e245f227f762f8c08","kind":"tag","published_at":"2022-04-26T19:22:41.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.7.1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.7.1/manifests"},{"name":"v5.2.7","sha":"459e7cf62252558bbf65f582a230562ab1a76c5e","kind":"tag","published_at":"2022-03-10T23:59:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.7","html_url":"https://github.com/rails/rails/releases/tag/v5.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.7/manifests"},{"name":"v6.1.5","sha":"53410537594be0c0a528cff53dce433dd386cb6a","kind":"tag","published_at":"2022-03-10T21:11:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.5","html_url":"https://github.com/rails/rails/releases/tag/v6.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.5/manifests"},{"name":"v7.0.2.3","sha":"de53ba56cab69fb9707785a397a59ac4aaee9d6f","kind":"tag","published_at":"2022-03-08T17:50:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.2.3","html_url":"https://github.com/rails/rails/releases/tag/v7.0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2.3/manifests"},{"name":"v6.1.4.7","sha":"66073335585f04f2ed0f5ef930eb3c8955d50a6a","kind":"tag","published_at":"2022-03-08T17:48:35.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.4.7","html_url":"https://github.com/rails/rails/releases/tag/v6.1.4.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.4.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.7/manifests"},{"name":"v6.0.4.7","sha":"4ba546e960cb368b1b552a3f91a371aced64da4c","kind":"tag","published_at":"2022-03-08T17:47:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.4.7","html_url":"https://github.com/rails/rails/releases/tag/v6.0.4.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.4.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.7/manifests"},{"name":"v5.2.6.3","sha":"b287570dbadcc418ce64b83ebde2746891e12d03","kind":"tag","published_at":"2022-03-08T17:45:10.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.6.3","html_url":"https://github.com/rails/rails/releases/tag/v5.2.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.6.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.6.3/manifests"},{"name":"v7.0.2.2","sha":"2459c20afb508c987347f52148210d874a9af4fa","kind":"tag","published_at":"2022-02-11T19:43:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.2.2","html_url":"https://github.com/rails/rails/releases/tag/v7.0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2.2/manifests"},{"name":"v6.1.4.6","sha":"10a2c77e901eb15b486f2c72fd9997bd0e2d506c","kind":"tag","published_at":"2022-02-11T19:41:30.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.4.6","html_url":"https://github.com/rails/rails/releases/tag/v6.1.4.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.4.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.6/manifests"},{"name":"v6.0.4.6","sha":"5f85a37f49227a76ec472eb74954b54806028641","kind":"tag","published_at":"2022-02-11T19:39:38.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.4.6","html_url":"https://github.com/rails/rails/releases/tag/v6.0.4.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.4.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.6/manifests"},{"name":"v5.2.6.2","sha":"46fe51b4875ba947cd3317cef420042f22aa8ffd","kind":"tag","published_at":"2022-02-11T19:37:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.6.2","html_url":"https://github.com/rails/rails/releases/tag/v5.2.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.6.2/manifests"},{"name":"v5.2.6.1","sha":"9c111dcbb9d15bbc8328edbae03e67746cdec314","kind":"tag","published_at":"2022-02-11T18:38:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.6.1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.6.1/manifests"},{"name":"v6.0.4.5","sha":"c06fa92a3f8b3ff88c85ce587630c451ea3396a6","kind":"tag","published_at":"2022-02-11T18:24:38.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.4.5","html_url":"https://github.com/rails/rails/releases/tag/v6.0.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.4.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.5/manifests"},{"name":"v6.1.4.5","sha":"6d25fed5c70bc1bd3292f69692c82063dd32320a","kind":"tag","published_at":"2022-02-11T18:22:29.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.4.5","html_url":"https://github.com/rails/rails/releases/tag/v6.1.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.4.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.5/manifests"},{"name":"v7.0.2.1","sha":"365e0fe8c346a90c91d2f622b4bdae2fbb11a940","kind":"tag","published_at":"2022-02-11T18:18:37.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.2.1","html_url":"https://github.com/rails/rails/releases/tag/v7.0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2.1/manifests"},{"name":"v7.0.2","sha":"76489d81ba77216271870e11fba6889088016fa5","kind":"tag","published_at":"2022-02-08T23:10:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.2","html_url":"https://github.com/rails/rails/releases/tag/v7.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.2/manifests"},{"name":"v7.0.1","sha":"6bfc637659248df5d6719a86d2981b52662d9b50","kind":"tag","published_at":"2022-01-06T21:53:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.1","html_url":"https://github.com/rails/rails/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"984c3ef2775781d47efa9f541ce570daa2434a80","kind":"tag","published_at":"2021-12-15T23:42:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.0","html_url":"https://github.com/rails/rails/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0/manifests"},{"name":"v6.1.4.4","sha":"87d4d0f4126f64d991d40a1827de50935ddfdbff","kind":"tag","published_at":"2021-12-15T22:52:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.4.4","html_url":"https://github.com/rails/rails/releases/tag/v6.1.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.4.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.4/manifests"},{"name":"v6.0.4.4","sha":"34bd524a9d7580ceecbf4a6dd9dced6296e20f97","kind":"tag","published_at":"2021-12-15T22:45:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.4.4","html_url":"https://github.com/rails/rails/releases/tag/v6.0.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.4.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.4/manifests"},{"name":"v7.0.0.rc3","sha":"834cc1aee3b3a9e0f5884fde1242c6d7b5e8a3dd","kind":"tag","published_at":"2021-12-14T23:04:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.0.rc3","html_url":"https://github.com/rails/rails/releases/tag/v7.0.0.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.0.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.rc3/manifests"},{"name":"v6.1.4.3","sha":"ac2e12a0fd1ff17de5021d4150df7feb864fc83d","kind":"tag","published_at":"2021-12-14T23:02:12.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.4.3","html_url":"https://github.com/rails/rails/releases/tag/v6.1.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.3/manifests"},{"name":"v6.0.4.3","sha":"0cc179fdc77e57ee2756769ec4d14203d93e2354","kind":"tag","published_at":"2021-12-14T23:00:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.4.3","html_url":"https://github.com/rails/rails/releases/tag/v6.0.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.3/manifests"},{"name":"v6.0.4.2","sha":"9ef61211d7861093a69fa1fbfc2ba136abd37cd2","kind":"tag","published_at":"2021-12-14T20:09:32.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.4.2","html_url":"https://github.com/rails/rails/releases/tag/v6.0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.2/manifests"},{"name":"v6.1.4.2","sha":"5e52f65fe99c46d40602f2b46418a3f9fee2260e","kind":"tag","published_at":"2021-12-14T19:45:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.4.2","html_url":"https://github.com/rails/rails/releases/tag/v6.1.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.2/manifests"},{"name":"v7.0.0.rc2","sha":"69e2e898478a1795913b8fda7cb95079228f8fb2","kind":"tag","published_at":"2021-12-14T19:39:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v7.0.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.rc2/manifests"},{"name":"v7.0.0.rc1","sha":"7c10fe108adfb1cd1c35ce44d5fbc0dd820c76d4","kind":"tag","published_at":"2021-12-06T21:27:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v7.0.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.rc1/manifests"},{"name":"v7.0.0.alpha2","sha":"ceb4b94baaf17f3a9f4ea795c83ec6c67211f737","kind":"tag","published_at":"2021-09-15T23:14:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.0.alpha2","html_url":"https://github.com/rails/rails/releases/tag/v7.0.0.alpha2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.0.alpha2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.alpha2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.alpha2/manifests"},{"name":"v7.0.0.alpha1","sha":"9b7be48212a2b6979b8af5093bb58ee5087e5044","kind":"tag","published_at":"2021-09-15T21:55:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v7.0.0.alpha1","html_url":"https://github.com/rails/rails/releases/tag/v7.0.0.alpha1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v7.0.0.alpha1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.alpha1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v7.0.0.alpha1/manifests"},{"name":"v6.1.4.1","sha":"90357af08048ef5076730505f6e7b14a81f33d0c","kind":"tag","published_at":"2021-08-19T16:25:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.4.1","html_url":"https://github.com/rails/rails/releases/tag/v6.1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4.1/manifests"},{"name":"v6.0.4.1","sha":"0d304eae601f085274b2e2c04316e025b443da62","kind":"tag","published_at":"2021-08-19T16:15:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.4.1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4.1/manifests"},{"name":"v6.1.4","sha":"83217025a171593547d1268651b446d3533e2019","kind":"tag","published_at":"2021-06-24T20:39:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.4","html_url":"https://github.com/rails/rails/releases/tag/v6.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.4/manifests"},{"name":"v6.0.4","sha":"6e721d79ba9458317c93bb02590bbaa25c5a3649","kind":"tag","published_at":"2021-06-15T20:14:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.4","html_url":"https://github.com/rails/rails/releases/tag/v6.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.4/manifests"},{"name":"v5.2.6","sha":"48661542a2607d55f436438fe21001d262e61fec","kind":"tag","published_at":"2021-05-05T17:02:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.6","html_url":"https://github.com/rails/rails/releases/tag/v5.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.6/manifests"},{"name":"v6.0.3.7","sha":"c04aff675d4cd3e8a54e0008dbfca10a8832a414","kind":"tag","published_at":"2021-05-05T16:01:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.3.7","html_url":"https://github.com/rails/rails/releases/tag/v6.0.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.7/manifests"},{"name":"v6.1.3.2","sha":"75ac626c4e21129d8296d4206a1960563cc3d4aa","kind":"tag","published_at":"2021-05-05T15:34:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.3.2","html_url":"https://github.com/rails/rails/releases/tag/v6.1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.3.2/manifests"},{"name":"v5.2.4.6","sha":"26126839058bad41120b5d74f3cc06b93baa987e","kind":"tag","published_at":"2021-05-05T15:28:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.4.6","html_url":"https://github.com/rails/rails/releases/tag/v5.2.4.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.4.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.6/manifests"},{"name":"v6.1.3.1","sha":"85c6823b77b60f2a3a6a25d7a1013032e8c580ef","kind":"tag","published_at":"2021-03-26T18:05:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.3.1","html_url":"https://github.com/rails/rails/releases/tag/v6.1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.3.1/manifests"},{"name":"v6.0.3.6","sha":"0073c7b29339b2ee1e11aa5c9622ea452d0633fc","kind":"tag","published_at":"2021-03-26T17:31:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.3.6","html_url":"https://github.com/rails/rails/releases/tag/v6.0.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.6/manifests"},{"name":"v5.2.5","sha":"cb0a558f42fc6957fac4d2daa16771b72ff7da6e","kind":"tag","published_at":"2021-03-26T17:16:38.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.5","html_url":"https://github.com/rails/rails/releases/tag/v5.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.5/manifests"},{"name":"v6.1.3","sha":"5aaaa1630ae9a71b3c3ecc4dc46074d678c08d67","kind":"tag","published_at":"2021-02-17T18:39:55.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.3","html_url":"https://github.com/rails/rails/releases/tag/v6.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.3/manifests"},{"name":"v6.1.2.1","sha":"130c128eae233bf71231c73b9c3c3b3f3ede918b","kind":"tag","published_at":"2021-02-10T20:44:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.2.1","html_url":"https://github.com/rails/rails/releases/tag/v6.1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.2.1/manifests"},{"name":"v6.0.3.5","sha":"c5929d5eb55b749bc124b3ccc2d79323d015701f","kind":"tag","published_at":"2021-02-10T20:39:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.3.5","html_url":"https://github.com/rails/rails/releases/tag/v6.0.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.5/manifests"},{"name":"v5.2.4.5","sha":"dc7364b1f39cf2fa3c3af3ea0f239f9ae1b5a790","kind":"tag","published_at":"2021-02-10T20:34:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.4.5","html_url":"https://github.com/rails/rails/releases/tag/v5.2.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.4.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.5/manifests"},{"name":"v6.1.2","sha":"bf8c59cd896b1bf98d0f3df356531fa4c163219f","kind":"tag","published_at":"2021-02-09T21:27:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.2","html_url":"https://github.com/rails/rails/releases/tag/v6.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.2/manifests"},{"name":"v6.1.1","sha":"5f3ff60084ab5d5921ca3499814e4697f8350ee7","kind":"tag","published_at":"2021-01-07T22:58:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.1","html_url":"https://github.com/rails/rails/releases/tag/v6.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.1/manifests"},{"name":"v6.1.0","sha":"914caca2d31bd753f47f9168f2a375921d9e91cc","kind":"tag","published_at":"2020-12-09T19:56:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.0","html_url":"https://github.com/rails/rails/releases/tag/v6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.0/manifests"},{"name":"v6.1.0.rc2","sha":"b38eb45ad9cb2041b30ac5d4d7b5b6e7b911ff2e","kind":"tag","published_at":"2020-12-01T22:00:32.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v6.1.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.0.rc2/manifests"},{"name":"v6.1.0.rc1","sha":"8389f9902c3f0e984df17a77386493f856d7a1bb","kind":"tag","published_at":"2020-11-02T21:13:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.1.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v6.1.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.1.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.1.0.rc1/manifests"},{"name":"v6.0.3.4","sha":"fe76a95b0d252a2d7c25e69498b720c96b243ea2","kind":"tag","published_at":"2020-10-07T16:49:09.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.3.4","html_url":"https://github.com/rails/rails/releases/tag/v6.0.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.4/manifests"},{"name":"v5.2.4.4","sha":"404ad9e8acf8ab45ae2314050131a00e57e63b40","kind":"tag","published_at":"2020-09-09T18:35:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.4.4","html_url":"https://github.com/rails/rails/releases/tag/v5.2.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.4.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.4/manifests"},{"name":"v6.0.3.3","sha":"070d4afacd3e9721b7e3a4634e4d026b5fa2c32c","kind":"tag","published_at":"2020-09-09T18:18:22.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.3.3","html_url":"https://github.com/rails/rails/releases/tag/v6.0.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.3/manifests"},{"name":"v6.0.3.2","sha":"fbe2433be6e052a1acac63c7faf287c52ed3c5ba","kind":"tag","published_at":"2020-06-17T14:53:35.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.3.2","html_url":"https://github.com/rails/rails/releases/tag/v6.0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.2/manifests"},{"name":"v6.0.3.1","sha":"34991a6ae2fc68347c01ea7382fa89004159e019","kind":"tag","published_at":"2020-05-18T15:46:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.3.1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.1/manifests"},{"name":"v5.2.4.3","sha":"7b5cc5a5dfcf38522be0a4b5daa97c5b2ba26c20","kind":"tag","published_at":"2020-05-18T15:41:33.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.4.3","html_url":"https://github.com/rails/rails/releases/tag/v5.2.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.3/manifests"},{"name":"v4.2.11.3","sha":"11f2bdf75a888682b34df0f9be03b94f54fc6796","kind":"tag","published_at":"2020-05-15T18:34:39.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.11.3","html_url":"https://github.com/rails/rails/releases/tag/v4.2.11.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.11.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.11.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.11.3/manifests"},{"name":"v4.2.11.2","sha":"b9e5577b9943e21a216acccdc29c297585424c58","kind":"tag","published_at":"2020-05-15T16:29:48.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.11.2","html_url":"https://github.com/rails/rails/releases/tag/v4.2.11.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.11.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.11.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.11.2/manifests"},{"name":"v6.0.3","sha":"b738f1930f3c82f51741ef7241c1fee691d7deb2","kind":"tag","published_at":"2020-05-06T18:03:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.3","html_url":"https://github.com/rails/rails/releases/tag/v6.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3/manifests"},{"name":"v6.0.3.rc1","sha":"509b9da209a8481fef8310bc14d6c6cd27c629dc","kind":"tag","published_at":"2020-05-01T17:16:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.3.rc1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.3.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.3.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.3.rc1/manifests"},{"name":"v6.0.2.2","sha":"157920aead96865e3135f496c09ace607d5620dc","kind":"tag","published_at":"2020-03-19T16:43:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.2.2","html_url":"https://github.com/rails/rails/releases/tag/v6.0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2.2/manifests"},{"name":"v5.2.4.2","sha":"4dcc5435e9569e084f6f90fcea6e7c37d7bd2b4d","kind":"tag","published_at":"2020-03-19T16:30:32.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.4.2","html_url":"https://github.com/rails/rails/releases/tag/v5.2.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.2/manifests"},{"name":"v6.0.2.1","sha":"f33d52c95217212cbacc8d5e44b5a8e3cdc6f5b3","kind":"tag","published_at":"2019-12-18T19:07:58.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.2.1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2.1/manifests"},{"name":"v5.2.4.1","sha":"ac30e389ecfa0e26e3d44c1eda8488ddf63b3ecc","kind":"tag","published_at":"2019-12-18T19:00:38.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.4.1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.1/manifests"},{"name":"v6.0.2","sha":"f675cb30ce813a99b52b139a93e048330922fd9a","kind":"tag","published_at":"2019-12-13T18:08:10.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.2","html_url":"https://github.com/rails/rails/releases/tag/v6.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2/manifests"},{"name":"v6.0.2.rc2","sha":"63107e9914c893336f7612c2cd17a24474b6a6d6","kind":"tag","published_at":"2019-12-09T16:10:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.2.rc2","html_url":"https://github.com/rails/rails/releases/tag/v6.0.2.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.2.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2.rc2/manifests"},{"name":"v5.2.4","sha":"8bec77cc0f1fd47677a331a64f68c5918efd2ca9","kind":"tag","published_at":"2019-11-27T15:42:23.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.4","html_url":"https://github.com/rails/rails/releases/tag/v5.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4/manifests"},{"name":"v6.0.2.rc1","sha":"a015f55240258723df311360123af22b3204fa08","kind":"tag","published_at":"2019-11-27T15:08:11.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.2.rc1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.2.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.2.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.2.rc1/manifests"},{"name":"v5.2.4.rc1","sha":"9e2a34122bd436e92a21ded4a50fa23461c29a4e","kind":"tag","published_at":"2019-11-23T00:26:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.4.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.4.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.4.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.4.rc1/manifests"},{"name":"v6.0.1","sha":"09a2979f75c51afb797dd60261a8930f84144af8","kind":"tag","published_at":"2019-11-05T14:38:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.1/manifests"},{"name":"v6.0.1.rc1","sha":"7982363efabc03e4624cd35aa86e2d284dcd35f7","kind":"tag","published_at":"2019-10-31T20:04:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.1.rc1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.1.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.1.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.1.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.1.rc1/manifests"},{"name":"v6.0.0","sha":"66cabeda2c46c582d19738e1318be8d59584cc5b","kind":"tag","published_at":"2019-08-16T17:59:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.0","html_url":"https://github.com/rails/rails/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0/manifests"},{"name":"v6.0.0.rc2","sha":"16f2cd88e3ee92de341ba30b102e9206be3c68a7","kind":"tag","published_at":"2019-07-22T21:08:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v6.0.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.rc2/manifests"},{"name":"v6.0.0.rc1","sha":"01b7e9b73ac9dca92be0969e047b9cb0c767f261","kind":"tag","published_at":"2019-04-24T18:49:12.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.rc1/manifests"},{"name":"v5.2.3","sha":"b9ca94caea2ca6a6cc09abaffaad67b447134079","kind":"tag","published_at":"2019-03-28T02:59:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.3","html_url":"https://github.com/rails/rails/releases/tag/v5.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.3/manifests"},{"name":"v5.1.7","sha":"4f66945cd038bda638fc6729e0d54663d0dfbf22","kind":"tag","published_at":"2019-03-28T02:46:34.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.7","html_url":"https://github.com/rails/rails/releases/tag/v5.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.7/manifests"},{"name":"v5.1.7.rc1","sha":"ce0c4f3c822d75dda3226e92b9fb24f79bbd91d7","kind":"tag","published_at":"2019-03-22T04:11:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.7.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.1.7.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.7.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.7.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.7.rc1/manifests"},{"name":"v5.2.3.rc1","sha":"657103b603db54aa299055c38d085684f47650ab","kind":"tag","published_at":"2019-03-22T03:34:11.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.3.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.3.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.3.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.3.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.3.rc1/manifests"},{"name":"v6.0.0.beta3","sha":"7c87fd5635fd830905e17d3cbf1eb2a2215acedf","kind":"tag","published_at":"2019-03-13T17:01:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.0.beta3","html_url":"https://github.com/rails/rails/releases/tag/v6.0.0.beta3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.0.beta3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.beta3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.beta3/manifests"},{"name":"v5.2.2.1","sha":"e69ff43060c1194d2a3bd9b8d9e23f3ae26b84b5","kind":"tag","published_at":"2019-03-13T16:46:43.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.2.1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.2.1/manifests"},{"name":"v5.1.6.2","sha":"ec8697bf0bfafff7d897fb50e322afe42ddc1623","kind":"tag","published_at":"2019-03-13T16:44:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.6.2","html_url":"https://github.com/rails/rails/releases/tag/v5.1.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.6.2/manifests"},{"name":"v5.0.7.2","sha":"c4d3e202e10ae627b3b9c34498afb45450652421","kind":"tag","published_at":"2019-03-13T16:39:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.7.2","html_url":"https://github.com/rails/rails/releases/tag/v5.0.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.7.2/manifests"},{"name":"v4.2.11.1","sha":"e06a1e09b6bec32b0a05c72a3ae7ceb00f61bf7d","kind":"tag","published_at":"2019-03-13T16:35:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.11.1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.11.1/manifests"},{"name":"v6.0.0.beta2","sha":"5e6e505083c2b0caf85b2f86c6be3ff3d8750857","kind":"tag","published_at":"2019-02-25T22:45:11.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.0.beta2","html_url":"https://github.com/rails/rails/releases/tag/v6.0.0.beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.0.beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.beta2/manifests"},{"name":"v6.0.0.beta1","sha":"5a0230c67f852fb21173f99647e76336897446c1","kind":"tag","published_at":"2019-01-18T20:43:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v6.0.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v6.0.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v6.0.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v6.0.0.beta1/manifests"},{"name":"v5.2.2","sha":"94b5cd3a20edadd6f6b8cf0bdf1a4d4919df86cb","kind":"tag","published_at":"2018-12-04T18:12:22.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.2","html_url":"https://github.com/rails/rails/releases/tag/v5.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.2/manifests"},{"name":"v5.2.2.rc1","sha":"73ba3027261ef3ef75f29a037d11361240282be4","kind":"tag","published_at":"2018-11-28T22:51:28.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.2.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.2.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.2.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.2.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.2.rc1/manifests"},{"name":"v5.2.1.1","sha":"96dee0e7e5a8dd6ce42999b13d0bd0623073e229","kind":"tag","published_at":"2018-11-27T20:12:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.1.1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.1.1/manifests"},{"name":"v5.1.6.1","sha":"24ab200e26f7faee1f04a1d37b650e0becb79a41","kind":"tag","published_at":"2018-11-27T20:10:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.6.1","html_url":"https://github.com/rails/rails/releases/tag/v5.1.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.6.1/manifests"},{"name":"v5.0.7.1","sha":"23839528551bebd65c210c51c29b91acff875c01","kind":"tag","published_at":"2018-11-27T20:08:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.7.1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.7.1/manifests"},{"name":"v4.2.11","sha":"474b7392c69852e8932260ea370cd63cf1e4fcaa","kind":"tag","published_at":"2018-11-27T20:06:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.11","html_url":"https://github.com/rails/rails/releases/tag/v4.2.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.11/manifests"},{"name":"v5.2.1","sha":"fc5dd0b85189811062c85520fd70de8389b55aeb","kind":"tag","published_at":"2018-08-07T21:42:35.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.1/manifests"},{"name":"v5.2.1.rc1","sha":"90c033984f38e40c2ff53c036d89ee22c88fadab","kind":"tag","published_at":"2018-07-30T20:09:42.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.1.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.1.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.1.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.1.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.1.rc1/manifests"},{"name":"v5.2.0","sha":"375a4143cf5caeb6159b338be824903edfd62836","kind":"tag","published_at":"2018-04-09T20:04:48.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.0","html_url":"https://github.com/rails/rails/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0/manifests"},{"name":"v5.1.6","sha":"0ae59ea828ed20141af0d4c9ed9130eb47ce55f3","kind":"tag","published_at":"2018-03-29T18:27:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.6","html_url":"https://github.com/rails/rails/releases/tag/v5.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.6/manifests"},{"name":"v5.0.7","sha":"aea6423f013ca48f7704c70deadf2cd6ac7d70a1","kind":"tag","published_at":"2018-03-29T17:58:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.7","html_url":"https://github.com/rails/rails/releases/tag/v5.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.7/manifests"},{"name":"v5.2.0.rc2","sha":"db7edd81062648281d1e50c8ff9ebfafac5a9c3d","kind":"tag","published_at":"2018-03-20T17:49:55.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v5.2.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0.rc2/manifests"},{"name":"v5.1.5","sha":"6ccd2b0efdfb8e9ef41764ee60dfac9731338608","kind":"tag","published_at":"2018-02-14T19:51:37.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.5","html_url":"https://github.com/rails/rails/releases/tag/v5.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.5/manifests"},{"name":"v5.1.5.rc1","sha":"f8c00c130016b248d1d409f131356632dcc418c6","kind":"tag","published_at":"2018-02-01T18:57:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.5.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.1.5.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.5.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.5.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.5.rc1/manifests"},{"name":"v5.2.0.rc1","sha":"6a97a17f195a925959866edda2e951e20d7b1e76","kind":"tag","published_at":"2018-01-30T23:35:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0.rc1/manifests"},{"name":"v5.2.0.beta2","sha":"3ae1e1f3c055fe5b89287fb8e0e5b31416383fb8","kind":"tag","published_at":"2017-11-28T05:01:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.0.beta2","html_url":"https://github.com/rails/rails/releases/tag/v5.2.0.beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.0.beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0.beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0.beta2/manifests"},{"name":"v5.2.0.beta1","sha":"382e7d2e23ca8d0ad552dd759b9cbb88751a2fbc","kind":"tag","published_at":"2017-11-27T18:02:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.2.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v5.2.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.2.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.2.0.beta1/manifests"},{"name":"v4.2.10","sha":"6b9a1ac484a4eda1b43aba7ed864952aac743ab9","kind":"tag","published_at":"2017-09-27T14:26:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.10","html_url":"https://github.com/rails/rails/releases/tag/v4.2.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.10/manifests"},{"name":"v4.2.10.rc1","sha":"84e0a231e9100db8eff73a1b6b9ae82db2ade2d8","kind":"tag","published_at":"2017-09-20T19:39:05.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.10.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.10.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.10.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.10.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.10.rc1/manifests"},{"name":"v5.1.4","sha":"813af4655f9bf3c712cf50205eebd337070cee52","kind":"tag","published_at":"2017-09-08T00:49:09.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.4","html_url":"https://github.com/rails/rails/releases/tag/v5.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.4/manifests"},{"name":"v5.0.6","sha":"71f4758c50fca5220429365c23b014458e7341f6","kind":"tag","published_at":"2017-09-08T00:45:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.6","html_url":"https://github.com/rails/rails/releases/tag/v5.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.6/manifests"},{"name":"v5.1.4.rc1","sha":"df776aabc45b17dff2cf8edbdd3b1367a1c21167","kind":"tag","published_at":"2017-08-24T19:35:38.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.4.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.1.4.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.4.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.4.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.4.rc1/manifests"},{"name":"v5.0.6.rc1","sha":"656bd2de78f549b353d0c08b54d8a7445d47d2df","kind":"tag","published_at":"2017-08-24T19:09:48.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.6.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.6.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.6.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.6.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.6.rc1/manifests"},{"name":"v5.1.3","sha":"c338c66f84d847f3ddf06d3e064426c7991e553d","kind":"tag","published_at":"2017-08-03T19:13:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.3","html_url":"https://github.com/rails/rails/releases/tag/v5.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.3/manifests"},{"name":"v5.1.3.rc3","sha":"57ff548532b35330e822e27df629a952cf33bf37","kind":"tag","published_at":"2017-07-31T19:11:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.3.rc3","html_url":"https://github.com/rails/rails/releases/tag/v5.1.3.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.3.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.3.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.3.rc3/manifests"},{"name":"v5.0.5","sha":"450889d1464431a04ef5c8a0f6a45b877aafe506","kind":"tag","published_at":"2017-07-31T19:03:55.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.5","html_url":"https://github.com/rails/rails/releases/tag/v5.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.5/manifests"},{"name":"v5.0.5.rc2","sha":"a7ad9f18371ebc3a14616cbfe216e6d87cbcba6d","kind":"tag","published_at":"2017-07-25T20:24:22.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.5.rc2","html_url":"https://github.com/rails/rails/releases/tag/v5.0.5.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.5.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.5.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.5.rc2/manifests"},{"name":"v5.1.3.rc2","sha":"885b69237b40712ddda075796dc881d4da7af55e","kind":"tag","published_at":"2017-07-25T20:16:18.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.3.rc2","html_url":"https://github.com/rails/rails/releases/tag/v5.1.3.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.3.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.3.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.3.rc2/manifests"},{"name":"v5.0.5.rc1","sha":"872372aa93ae2abdcbb148d318c336563d0ba330","kind":"tag","published_at":"2017-07-19T19:42:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.5.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.5.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.5.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.5.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.5.rc1/manifests"},{"name":"v5.1.3.rc1","sha":"b6e24dbfc8d68c82dd62f2e99d668dca8df9b7f1","kind":"tag","published_at":"2017-07-19T19:29:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.3.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.1.3.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.3.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.3.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.3.rc1/manifests"},{"name":"v5.1.2","sha":"f8f3d709fc0df1fee5eadbaa5f518d2aef4a4f02","kind":"tag","published_at":"2017-06-26T21:49:48.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.2","html_url":"https://github.com/rails/rails/releases/tag/v5.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.2/manifests"},{"name":"v4.2.9","sha":"79c9f2e9422a23d144b71a18bd3058823b498116","kind":"tag","published_at":"2017-06-26T21:29:10.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.9","html_url":"https://github.com/rails/rails/releases/tag/v4.2.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.9/manifests"},{"name":"v5.1.2.rc1","sha":"1a32a58ea7ee61dab2c4628585a3ecb3e2d7320c","kind":"tag","published_at":"2017-06-20T17:02:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.2.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.1.2.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.2.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.2.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.2.rc1/manifests"},{"name":"v4.2.9.rc2","sha":"e13f5ba35b7105e4e66ff0b236018a6ad934da9f","kind":"tag","published_at":"2017-06-19T22:26:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.9.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.2.9.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.9.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.9.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.9.rc2/manifests"},{"name":"v5.0.4","sha":"c52823a0cf30a79e1abddc53aa8c6d0494ba5515","kind":"tag","published_at":"2017-06-19T21:57:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.4","html_url":"https://github.com/rails/rails/releases/tag/v5.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.4/manifests"},{"name":"v5.0.4.rc1","sha":"a2e6b307ba632082a9fb0d22716e7fa96da6543d","kind":"tag","published_at":"2017-06-14T20:47:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.4.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.4.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.4.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.4.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.4.rc1/manifests"},{"name":"v4.2.9.rc1","sha":"3c184ed4834a85b1eb197b6c530a5af13803f44f","kind":"tag","published_at":"2017-06-13T18:49:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.9.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.9.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.9.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.9.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.9.rc1/manifests"},{"name":"v5.1.1","sha":"c48b21685f4fec1c7a1c9b4e0dde4da89140ee22","kind":"tag","published_at":"2017-05-12T19:58:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.1","html_url":"https://github.com/rails/rails/releases/tag/v5.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.1/manifests"},{"name":"v5.0.3","sha":"52780d5d66515b3d9e5d10d2975deda3699ffd88","kind":"tag","published_at":"2017-05-12T19:53:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.3","html_url":"https://github.com/rails/rails/releases/tag/v5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.3/manifests"},{"name":"v5.1.0","sha":"ce93740a5e4437dfc1cf9b0b13da1bad06a2a598","kind":"tag","published_at":"2017-04-27T20:59:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.0","html_url":"https://github.com/rails/rails/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.0/manifests"},{"name":"v5.1.0.rc2","sha":"2745ab856dbd0c0b846a4aa5d15d046e19466c6f","kind":"tag","published_at":"2017-04-21T01:28:37.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v5.1.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.0.rc2/manifests"},{"name":"v5.1.0.rc1","sha":"d3b798b0879c70f3989efd322323a057a8507c99","kind":"tag","published_at":"2017-03-20T18:56:22.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.1.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.0.rc1/manifests"},{"name":"v5.0.2","sha":"38ed1f4be114b77bd2004792b9583552a30921a2","kind":"tag","published_at":"2017-03-01T23:12:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.2","html_url":"https://github.com/rails/rails/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.2/manifests"},{"name":"v5.0.2.rc1","sha":"2c858521b8e3a4d00b703a5ec08adbfe6141497c","kind":"tag","published_at":"2017-02-25T00:54:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.2.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.2.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.2.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.2.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.2.rc1/manifests"},{"name":"v5.1.0.beta1","sha":"f4acdd83ff76e2338895073ed914c525e7bb33b4","kind":"tag","published_at":"2017-02-23T19:54:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.1.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v5.1.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.1.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.1.0.beta1/manifests"},{"name":"v4.2.8","sha":"8ee716182df410052707c3d1eabf8bfd8e0e1c5e","kind":"tag","published_at":"2017-02-21T16:07:29.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.8","html_url":"https://github.com/rails/rails/releases/tag/v4.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.8/manifests"},{"name":"v4.2.8.rc1","sha":"8dd608b7b7b60f2fa8c5a3aaa0c8ab465ee50456","kind":"tag","published_at":"2017-02-10T02:43:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.8.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.8.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.8.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.8.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.8.rc1/manifests"},{"name":"v5.0.1","sha":"912ae0b34bf541f18d051c8a274a54aef91a5e04","kind":"tag","published_at":"2016-12-21T00:05:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.1/manifests"},{"name":"v5.0.1.rc2","sha":"0ef292cc8b1d66cbc85e271029402e72dfad66b5","kind":"tag","published_at":"2016-12-09T19:07:41.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.1.rc2","html_url":"https://github.com/rails/rails/releases/tag/v5.0.1.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.1.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.1.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.1.rc2/manifests"},{"name":"v5.0.1.rc1","sha":"82be3fe096231108e290433b5fe803451a37a160","kind":"tag","published_at":"2016-11-30T19:51:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.1.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.1.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.1.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.1.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.1.rc1/manifests"},{"name":"v3.2.22.5","sha":"e4b0a5f66ebd2b7f29e4f868d2f6b2504df091e6","kind":"tag","published_at":"2016-09-14T21:16:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.22.5","html_url":"https://github.com/rails/rails/releases/tag/v3.2.22.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.22.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.5/manifests"},{"name":"v3.2.22.4","sha":"c4e01690620c319ac3f04d213003f8001f33d14b","kind":"commit","published_at":"2016-08-11T19:17:30.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.22.4","html_url":"https://github.com/rails/rails/releases/tag/v3.2.22.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.22.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.4/manifests"},{"name":"v5.0.0.1","sha":"cdb307294a43eec489f0ea6ffdc6f0a07b16ff5c","kind":"commit","published_at":"2016-08-10T22:41:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.0.1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.1/manifests"},{"name":"v4.2.7.1","sha":"26dadfb187b1cf13dc2f783198b91b32d141c3ab","kind":"commit","published_at":"2016-08-10T22:25:38.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.7.1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.7.1/manifests"},{"name":"v3.2.22.3","sha":"ebc3639139d21eeb8452edb28ce62530cc075198","kind":"commit","published_at":"2016-08-10T22:23:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.22.3","html_url":"https://github.com/rails/rails/releases/tag/v3.2.22.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.22.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.3/manifests"},{"name":"v4.2.7","sha":"7f2327f65b4117384bec3547ccd5a99028df57e0","kind":"tag","published_at":"2016-07-13T02:54:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.7","html_url":"https://github.com/rails/rails/releases/tag/v4.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.7/manifests"},{"name":"v4.1.16","sha":"d8803304051639dfcb87d61f58a1960b1005de87","kind":"tag","published_at":"2016-07-12T22:19:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.16","html_url":"https://github.com/rails/rails/releases/tag/v4.1.16","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.16","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.16/manifests"},{"name":"v4.1.16.rc1","sha":"871d63e2c7632a59989ffce0137b482ab5d94fe5","kind":"tag","published_at":"2016-07-02T02:13:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.16.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.16.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.16.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.16.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.16.rc1/manifests"},{"name":"v4.2.7.rc1","sha":"5a85938418285ab81e3db52ea102d19f95ed7a94","kind":"tag","published_at":"2016-07-01T00:30:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.7.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.7.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.7.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.7.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.7.rc1/manifests"},{"name":"v5.0.0","sha":"2efddadd6cba4e2129acedf1d402d11abcc03996","kind":"tag","published_at":"2016-06-30T21:20:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.0","html_url":"https://github.com/rails/rails/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0/manifests"},{"name":"v5.0.0.rc2","sha":"50e0a6b209d1afe6c2bc3047208e14f13ac3b382","kind":"tag","published_at":"2016-06-22T20:01:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v5.0.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.rc2/manifests"},{"name":"v5.0.0.rc1","sha":"fbdcf5221ad7ea3d40ad09651962fc85d101dd67","kind":"tag","published_at":"2016-05-06T21:55:10.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.rc1/manifests"},{"name":"v5.0.0.beta4","sha":"f7a986012a6099445e20b6414d253ee0fc039118","kind":"tag","published_at":"2016-04-27T20:53:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.0.beta4","html_url":"https://github.com/rails/rails/releases/tag/v5.0.0.beta4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.0.beta4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta4/manifests"},{"name":"v4.1.15","sha":"d5c4b82b64f3cdd511eb79c4d43d6ab1548c0dee","kind":"tag","published_at":"2016-03-07T22:35:41.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.15","html_url":"https://github.com/rails/rails/releases/tag/v4.1.15","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.15","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.15/manifests"},{"name":"v4.2.6","sha":"a0e0b67b5afbb02d9ea9e48d71ae80b3efb8c0ac","kind":"tag","published_at":"2016-03-07T22:31:38.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.6","html_url":"https://github.com/rails/rails/releases/tag/v4.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.6/manifests"},{"name":"v4.1.15.rc1","sha":"06d2bfd42a08ebdab9b0ad94e690841a80c93830","kind":"tag","published_at":"2016-03-01T18:42:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.15.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.15.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.15.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.15.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.15.rc1/manifests"},{"name":"v4.2.6.rc1","sha":"ef8ace7dc97fa810bb59f1aac386b71db239c3ec","kind":"tag","published_at":"2016-03-01T18:36:27.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.6.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.6.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.6.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.6.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.6.rc1/manifests"},{"name":"v4.1.14.2","sha":"4cffd33a96da706fb36ab8dbf37732749ca27cfc","kind":"tag","published_at":"2016-02-29T19:17:41.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.14.2","html_url":"https://github.com/rails/rails/releases/tag/v4.1.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14.2/manifests"},{"name":"v4.2.5.2","sha":"97ad61e9583e2bf5c57d6f75008cadc80ba9b910","kind":"tag","published_at":"2016-02-29T19:15:29.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.5.2","html_url":"https://github.com/rails/rails/releases/tag/v4.2.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.5.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5.2/manifests"},{"name":"v3.2.22.2","sha":"1ac2ddbc433ec96dd06affb6f10f33d9eb12d52a","kind":"commit","published_at":"2016-02-29T18:39:32.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.22.2","html_url":"https://github.com/rails/rails/releases/tag/v3.2.22.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.22.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.2/manifests"},{"name":"v5.0.0.beta3","sha":"dbfa8fdfc29eb913fec6113a74394167aa13cdd6","kind":"tag","published_at":"2016-02-24T16:15:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.0.beta3","html_url":"https://github.com/rails/rails/releases/tag/v5.0.0.beta3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.0.beta3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta3/manifests"},{"name":"v5.0.0.beta2","sha":"49f6ce63f33b7817bcbd0cdf5f8881b63f40d9c9","kind":"tag","published_at":"2016-02-01T21:41:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.0.beta2","html_url":"https://github.com/rails/rails/releases/tag/v5.0.0.beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.0.beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta2/manifests"},{"name":"v3.2.22.1","sha":"8d86637fb64ae8ae81ab71a286ddba02cc3144a4","kind":"tag","published_at":"2016-01-25T18:27:28.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.22.1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.22.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.22.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22.1/manifests"},{"name":"v4.1.14.1","sha":"31ab3aa0e881acfd1475abae602455905a4cadf1","kind":"tag","published_at":"2016-01-25T18:26:23.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.14.1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14.1/manifests"},{"name":"v4.2.5.1","sha":"bb382b7aee116446518ca4ed1c6472d6b58f42b5","kind":"tag","published_at":"2016-01-25T18:25:38.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.5.1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5.1/manifests"},{"name":"v5.0.0.beta1.1","sha":"908c011395cc9e3ea1bb195f9d1bd30a9d9df98f","kind":"tag","published_at":"2016-01-25T18:24:28.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.0.beta1.1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.0.beta1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.0.beta1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta1.1/manifests"},{"name":"v5.0.0.beta1","sha":"099ddfdefd44fda11d0f6a72f934f8a0ee83141b","kind":"tag","published_at":"2015-12-18T21:15:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v5.0.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v5.0.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v5.0.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v5.0.0.beta1/manifests"},{"name":"v4.1.14","sha":"e694ac5fbc30bfe11c5b952084eab178bd649857","kind":"tag","published_at":"2015-11-12T17:19:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.14","html_url":"https://github.com/rails/rails/releases/tag/v4.1.14","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.14","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14/manifests"},{"name":"v4.2.5","sha":"73521d586981279a99d3ba038d62e2414125df7a","kind":"tag","published_at":"2015-11-12T17:02:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.5","html_url":"https://github.com/rails/rails/releases/tag/v4.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5/manifests"},{"name":"v4.2.5.rc2","sha":"5bda404fe1d7b5772560fdec99818b239d4b57aa","kind":"tag","published_at":"2015-11-05T03:00:30.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.5.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.2.5.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.5.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5.rc2/manifests"},{"name":"v4.1.14.rc2","sha":"96c4b1a1311b0f9e099db2819f08a2277377c552","kind":"tag","published_at":"2015-11-05T02:53:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.14.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.1.14.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.14.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14.rc2/manifests"},{"name":"v4.2.5.rc1","sha":"a37d0e57571f37e836638934a4e325c3accb550b","kind":"tag","published_at":"2015-10-30T20:46:22.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.5.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.5.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.5.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.5.rc1/manifests"},{"name":"v4.1.14.rc1","sha":"23df8809089cf3e5646829095ab0433f93f3e736","kind":"tag","published_at":"2015-10-30T20:43:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.14.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.14.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.14.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.14.rc1/manifests"},{"name":"v4.2.4","sha":"dac822ef58ae05f0e805222fa8744116080165ac","kind":"tag","published_at":"2015-08-24T18:23:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.4","html_url":"https://github.com/rails/rails/releases/tag/v4.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.4/manifests"},{"name":"v4.1.13","sha":"10ac0155b19ea5b457417244f4f327404b997935","kind":"tag","published_at":"2015-08-24T17:59:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.13","html_url":"https://github.com/rails/rails/releases/tag/v4.1.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.13/manifests"},{"name":"v4.2.4.rc1","sha":"b5cb514c23f64ffd6db05535730df2b4f71f0c61","kind":"tag","published_at":"2015-08-14T15:18:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.4.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.4.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.4.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.4.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.4.rc1/manifests"},{"name":"v4.1.13.rc1","sha":"099a9181fcf350b05bc33b61bac288277b994ad0","kind":"tag","published_at":"2015-08-14T15:09:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.13.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.13.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.13.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.13.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.13.rc1/manifests"},{"name":"v4.2.3","sha":"6ac6daa43e1c5b7388f8fd69f8117eb7668887c7","kind":"tag","published_at":"2015-06-25T21:28:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.3","html_url":"https://github.com/rails/rails/releases/tag/v4.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.3/manifests"},{"name":"v4.1.12","sha":"adfda00f06248435e0aa2fc6545b1310644d91b6","kind":"tag","published_at":"2015-06-25T21:24:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.12","html_url":"https://github.com/rails/rails/releases/tag/v4.1.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.12/manifests"},{"name":"v4.2.3.rc1","sha":"496bbfe0897b06c8af1404b59fca7869a27c870d","kind":"tag","published_at":"2015-06-22T14:21:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.3.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.3.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.3.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.3.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.3.rc1/manifests"},{"name":"v4.1.12.rc1","sha":"68d324549668169a41bb30f98afdd01682bc5dec","kind":"tag","published_at":"2015-06-22T14:03:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.12.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.12.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.12.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.12.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.12.rc1/manifests"},{"name":"v4.2.2","sha":"5d101c33fa19deca00e251152d25090cc152998f","kind":"tag","published_at":"2015-06-16T18:00:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.2","html_url":"https://github.com/rails/rails/releases/tag/v4.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.2/manifests"},{"name":"v4.1.11","sha":"260da06e6b63f4644fe67e67fbd486585f9d2724","kind":"tag","published_at":"2015-06-16T17:57:55.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.11","html_url":"https://github.com/rails/rails/releases/tag/v4.1.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.11/manifests"},{"name":"v3.2.22","sha":"9dc8ddc39424818a3d713a353353ac20cb431218","kind":"commit","published_at":"2015-06-16T16:12:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.22","html_url":"https://github.com/rails/rails/releases/tag/v3.2.22","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.22","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.22/manifests"},{"name":"v4.1.10","sha":"5496ec8aac95f728465f218d12733cedef84232a","kind":"tag","published_at":"2015-03-19T16:48:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.10","html_url":"https://github.com/rails/rails/releases/tag/v4.1.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10/manifests"},{"name":"v4.2.1","sha":"f1ccb2e6ecb5486179ee6b20438d562ac45de4f4","kind":"tag","published_at":"2015-03-19T16:39:37.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1/manifests"},{"name":"v4.1.10.rc4","sha":"410f7d29e998befb27ab0b3dee3bbe83944bdc04","kind":"tag","published_at":"2015-03-12T21:31:09.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.10.rc4","html_url":"https://github.com/rails/rails/releases/tag/v4.1.10.rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.10.rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10.rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10.rc4/manifests"},{"name":"v4.2.1.rc4","sha":"9bd0ca4501879709fcc84a6b206835fe4ead751f","kind":"tag","published_at":"2015-03-12T21:24:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.1.rc4","html_url":"https://github.com/rails/rails/releases/tag/v4.2.1.rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.1.rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1.rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1.rc4/manifests"},{"name":"v4.1.10.rc3","sha":"77e324b59ec0e0b09f5c26b035add9de40482470","kind":"tag","published_at":"2015-03-02T21:38:18.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.10.rc3","html_url":"https://github.com/rails/rails/releases/tag/v4.1.10.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.10.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10.rc3/manifests"},{"name":"v4.2.1.rc3","sha":"4e2754b5c73e2fd6a8f997beafcbeff888410581","kind":"tag","published_at":"2015-03-02T21:34:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.1.rc3","html_url":"https://github.com/rails/rails/releases/tag/v4.2.1.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.1.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1.rc3/manifests"},{"name":"v4.1.10.rc2","sha":"08217de91143353f263ede79bcc01d529f644c30","kind":"tag","published_at":"2015-02-25T22:20:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.10.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.1.10.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.10.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10.rc2/manifests"},{"name":"v4.2.1.rc2","sha":"d48bb9cb018a83a88dd04c9a4cbdee1f5b7ab885","kind":"tag","published_at":"2015-02-25T22:18:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.1.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.2.1.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.1.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1.rc2/manifests"},{"name":"v4.1.10.rc1","sha":"a698862cbce7f12475d3fefdb7268022b3bd9af1","kind":"tag","published_at":"2015-02-20T22:23:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.10.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.10.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.10.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.10.rc1/manifests"},{"name":"v4.2.1.rc1","sha":"59bb184078cc23fbbb3a28dc34a51326da87014a","kind":"tag","published_at":"2015-02-20T21:40:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.1.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.1.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.1.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.1.rc1/manifests"},{"name":"v4.1.9","sha":"cca85ba699242c3266c5132dd601fdd8c5c5bb16","kind":"tag","published_at":"2015-01-06T20:02:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.9","html_url":"https://github.com/rails/rails/releases/tag/v4.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.9/manifests"},{"name":"v4.0.13","sha":"3c194d4a8d585547d1fe45f596d2800c155b1a4c","kind":"commit","published_at":"2015-01-06T19:14:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.13","html_url":"https://github.com/rails/rails/releases/tag/v4.0.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.13/manifests"},{"name":"v4.1.9.rc1","sha":"116695b25890e2587923d4a237ce4107e3adb145","kind":"tag","published_at":"2015-01-02T01:09:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.9.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.9.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.9.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.9.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.9.rc1/manifests"},{"name":"v4.0.13.rc1","sha":"e63670a414828148b688eb0efb1e8e626798e7d9","kind":"commit","published_at":"2015-01-02T00:53:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.13.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.0.13.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.13.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.13.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.13.rc1/manifests"},{"name":"v4.2.0","sha":"7847a19f476fb9bee287681586d872ea43785e53","kind":"tag","published_at":"2014-12-20T00:14:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.0","html_url":"https://github.com/rails/rails/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0/manifests"},{"name":"v4.2.0.rc3","sha":"203000dd4683e2ce4bdeaa3fe379b811ba8e5401","kind":"tag","published_at":"2014-12-13T02:57:58.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.0.rc3","html_url":"https://github.com/rails/rails/releases/tag/v4.2.0.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.0.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.rc3/manifests"},{"name":"v4.2.0.rc2","sha":"4c67c1f551f182aa2730a8a8cfa80fcf02622a92","kind":"tag","published_at":"2014-12-05T23:19:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.2.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.rc2/manifests"},{"name":"v4.2.0.rc1","sha":"62264419e95a75da7762caf7d566982d24227794","kind":"tag","published_at":"2014-11-28T17:51:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.rc1/manifests"},{"name":"v4.1.7.1","sha":"7b8e4f82717fcb944eb7e712050b223bd47b544e","kind":"tag","published_at":"2014-11-19T19:10:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.7.1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.7.1/manifests"},{"name":"v4.0.11.1","sha":"a1ec4da291dd3e0705be536e71a963d8d356ff24","kind":"commit","published_at":"2014-11-19T17:43:33.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.11.1","html_url":"https://github.com/rails/rails/releases/tag/v4.0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.11.1/manifests"},{"name":"v4.1.8","sha":"b32babc4b0ff8f830933f25375ce9dbfbb356601","kind":"tag","published_at":"2014-11-17T15:50:58.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.8","html_url":"https://github.com/rails/rails/releases/tag/v4.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.8/manifests"},{"name":"v4.0.12","sha":"ee20103f1b2fa2ea66834682c7173bb23ddd83e0","kind":"tag","published_at":"2014-11-17T15:49:39.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.12","html_url":"https://github.com/rails/rails/releases/tag/v4.0.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.12/manifests"},{"name":"v3.2.21","sha":"ba886f73a2b4a06f3400f0698290c54566639b6a","kind":"tag","published_at":"2014-11-17T15:48:35.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.21","html_url":"https://github.com/rails/rails/releases/tag/v3.2.21","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.21","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.21","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.21/manifests"},{"name":"v4.2.0.beta4","sha":"4daebedcc41e35079c47d5f130f5c7ad12db8bbb","kind":"commit","published_at":"2014-10-30T21:12:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.0.beta4","html_url":"https://github.com/rails/rails/releases/tag/v4.2.0.beta4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.0.beta4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.beta4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.beta4/manifests"},{"name":"v3.2.20","sha":"346acea281f048c853a6318429daac8d1a2e2d68","kind":"tag","published_at":"2014-10-29T22:40:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.20","html_url":"https://github.com/rails/rails/releases/tag/v3.2.20","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.20","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.20","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.20/manifests"},{"name":"v4.0.11","sha":"8cf8a08c7ef417b5183928f1c3c6d785c115bb48","kind":"tag","published_at":"2014-10-29T22:39:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.11","html_url":"https://github.com/rails/rails/releases/tag/v4.0.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.11/manifests"},{"name":"v4.1.7","sha":"6fe2572af11dc42f33d4f0e33a22391a85f2a1d2","kind":"tag","published_at":"2014-10-29T22:38:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.7","html_url":"https://github.com/rails/rails/releases/tag/v4.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.7/manifests"},{"name":"v4.2.0.beta3","sha":"331d7c6f9e6a481a23e5f120d95f7c0aabb6c60d","kind":"tag","published_at":"2014-10-29T22:38:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.0.beta3","html_url":"https://github.com/rails/rails/releases/tag/v4.2.0.beta3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.0.beta3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.beta3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.beta3/manifests"},{"name":"v4.2.0.beta2","sha":"21bc83306b76c456e83f8824cb5822f9f1195d9c","kind":"tag","published_at":"2014-09-26T17:39:33.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.0.beta2","html_url":"https://github.com/rails/rails/releases/tag/v4.2.0.beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.0.beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.beta2/manifests"},{"name":"v4.0.10","sha":"5aef91ea98f5df16ab6b9db14229dfba7dee1653","kind":"commit","published_at":"2014-09-11T17:31:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.10","html_url":"https://github.com/rails/rails/releases/tag/v4.0.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.10/manifests"},{"name":"v4.1.6","sha":"24027162dbe226acfbf3a91872237a9557764d72","kind":"tag","published_at":"2014-09-11T17:24:29.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.6","html_url":"https://github.com/rails/rails/releases/tag/v4.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.6/manifests"},{"name":"v4.1.6.rc2","sha":"57d65e3b286dcddbc4f07db1c618da42f31d1b84","kind":"tag","published_at":"2014-09-08T18:10:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.6.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.1.6.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.6.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.6.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.6.rc2/manifests"},{"name":"v4.0.10.rc2","sha":"91d4433d18b646a8ceb02ea13939ede4710b89ed","kind":"commit","published_at":"2014-09-08T17:53:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.10.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.0.10.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.10.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.10.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.10.rc2/manifests"},{"name":"v4.2.0.beta1","sha":"6a23bf0f4c33151e0cec0648e271dc6f5ab3f686","kind":"tag","published_at":"2014-08-20T02:33:35.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.2.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v4.2.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.2.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.2.0.beta1/manifests"},{"name":"v4.1.6.rc1","sha":"c5310bed8642656ade02d97c6fae651b54654a6b","kind":"tag","published_at":"2014-08-19T20:51:27.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.6.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.6.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.6.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.6.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.6.rc1/manifests"},{"name":"v4.0.10.rc1","sha":"77b60a2c43c1188d4d2d2e52fa5fd59b50e92e1b","kind":"commit","published_at":"2014-08-19T17:41:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.10.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.0.10.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.10.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.10.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.10.rc1/manifests"},{"name":"v4.1.5","sha":"9bb76261d39b59e7e229c80d052ca91a65ff17be","kind":"tag","published_at":"2014-08-18T16:58:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.5","html_url":"https://github.com/rails/rails/releases/tag/v4.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.5/manifests"},{"name":"v4.0.9","sha":"b792566f3ebdd0c7dc688db7a4076d1c2c74f69f","kind":"commit","published_at":"2014-08-18T16:46:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.9","html_url":"https://github.com/rails/rails/releases/tag/v4.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.9/manifests"},{"name":"v4.1.4","sha":"7c4bfe1c954ef90acf4f790e46fcbbd07d85af3e","kind":"tag","published_at":"2014-07-02T19:52:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.4","html_url":"https://github.com/rails/rails/releases/tag/v4.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.4/manifests"},{"name":"v4.0.8","sha":"31e922996b97b7c223ebc1e26d1a1a2764bb0a62","kind":"commit","published_at":"2014-07-02T18:28:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.8","html_url":"https://github.com/rails/rails/releases/tag/v4.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.8/manifests"},{"name":"v4.1.3","sha":"dfa7a76de8c1f7af0ef28119f9ac3072057c665e","kind":"tag","published_at":"2014-07-02T17:04:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.3","html_url":"https://github.com/rails/rails/releases/tag/v4.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.3/manifests"},{"name":"v4.0.7","sha":"f17b04a23e7c597876cb2320ef9d525537e0b0a8","kind":"commit","published_at":"2014-07-02T15:58:10.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.7","html_url":"https://github.com/rails/rails/releases/tag/v4.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.7/manifests"},{"name":"v3.2.19","sha":"53c845cb185036c71cc9793c4eb6bf4dc989307b","kind":"commit","published_at":"2014-07-02T15:55:09.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.19","html_url":"https://github.com/rails/rails/releases/tag/v3.2.19","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.19","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.19","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.19/manifests"},{"name":"v4.1.2","sha":"0690f6f3a47b8fddf60ac57da006f0b8bfa22e32","kind":"tag","published_at":"2014-06-26T14:48:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.2","html_url":"https://github.com/rails/rails/releases/tag/v4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.2/manifests"},{"name":"v4.0.6","sha":"276b72c60342eb716e7457b447bce1e352780e92","kind":"commit","published_at":"2014-06-26T13:37:37.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.6","html_url":"https://github.com/rails/rails/releases/tag/v4.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.6/manifests"},{"name":"v4.1.2.rc3","sha":"6ed0f63398ba7268c541f9b959f7a56b68584301","kind":"tag","published_at":"2014-06-23T17:26:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.2.rc3","html_url":"https://github.com/rails/rails/releases/tag/v4.1.2.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.2.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.2.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.2.rc3/manifests"},{"name":"v4.0.6.rc3","sha":"9649cb4b51c7f0194e02252e5b88a362a70da97f","kind":"commit","published_at":"2014-06-23T17:21:34.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.6.rc3","html_url":"https://github.com/rails/rails/releases/tag/v4.0.6.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.6.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.6.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.6.rc3/manifests"},{"name":"v4.1.2.rc2","sha":"5006b63ae3609aee86c4dae603d8dfe80230b1b1","kind":"tag","published_at":"2014-06-16T16:28:54.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.2.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.1.2.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.2.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.2.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.2.rc2/manifests"},{"name":"v4.0.6.rc2","sha":"13c6bac0b73d4bba9cf0714b65cd1e339ee481b2","kind":"commit","published_at":"2014-06-16T16:14:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.6.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.0.6.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.6.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.6.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.6.rc2/manifests"},{"name":"v4.1.2.rc1","sha":"fcb1afc245455130ca6d42db8760cc7b43b99d18","kind":"tag","published_at":"2014-05-27T16:11:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.2.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.2.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.2.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.2.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.2.rc1/manifests"},{"name":"v4.0.6.rc1","sha":"100682883ba38cd8420350ef21d47f26e1b9c6c5","kind":"commit","published_at":"2014-05-27T15:58:48.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.6.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.0.6.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.6.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.6.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.6.rc1/manifests"},{"name":"v4.1.1","sha":"254e8e2c97b5df1dafd54cf8f305f7bad05f4a63","kind":"tag","published_at":"2014-05-06T16:17:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.1/manifests"},{"name":"v3.2.18","sha":"50d6b4549d56ac3a82f2096bd479a7b2305b0bf3","kind":"commit","published_at":"2014-05-06T16:03:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.18","html_url":"https://github.com/rails/rails/releases/tag/v3.2.18","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.18","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.18","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.18/manifests"},{"name":"v4.0.5","sha":"15ac2f0b6b2702f180707f480eb966a4e3b96e25","kind":"commit","published_at":"2014-05-06T14:32:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.5","html_url":"https://github.com/rails/rails/releases/tag/v4.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.5/manifests"},{"name":"v4.1.0","sha":"4e168015cef61207981d2427d4dbb6cf15f71182","kind":"tag","published_at":"2014-04-08T19:19:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.0","html_url":"https://github.com/rails/rails/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0/manifests"},{"name":"v4.1.0.rc2","sha":"6b6f8b566ef3245f5b25d03c61b2af0a1f55301e","kind":"tag","published_at":"2014-03-25T20:10:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.1.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0.rc2/manifests"},{"name":"v4.0.4","sha":"2abe4b032d080f7177c6f2e34c9124c468e8a293","kind":"commit","published_at":"2014-03-14T17:35:22.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.4","html_url":"https://github.com/rails/rails/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.4/manifests"},{"name":"v4.0.4.rc1","sha":"26bfdf9f300be2ada831a34b8eb71f55a9a5122f","kind":"commit","published_at":"2014-03-11T17:28:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.4.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.0.4.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.4.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.4.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.4.rc1/manifests"},{"name":"v4.1.0.rc1","sha":"78ba185fb91d7066ae5c396ca97034c13054236c","kind":"tag","published_at":"2014-02-18T20:52:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0.rc1/manifests"},{"name":"v4.1.0.beta2","sha":"8b20c72dd80e2faf531f308d430a145a253aeac3","kind":"tag","published_at":"2014-02-18T18:45:39.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.0.beta2","html_url":"https://github.com/rails/rails/releases/tag/v4.1.0.beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.0.beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0.beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0.beta2/manifests"},{"name":"v4.0.3","sha":"1f6113c6a9f1f2f8e362b0e7702afac5d8cf98db","kind":"tag","published_at":"2014-02-18T18:38:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.3","html_url":"https://github.com/rails/rails/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.3/manifests"},{"name":"v3.2.17","sha":"666e9f65bdfeb6cc5aa80b6254608adc3d7845ce","kind":"tag","published_at":"2014-02-18T18:17:10.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.17","html_url":"https://github.com/rails/rails/releases/tag/v3.2.17","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.17","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.17/manifests"},{"name":"v4.1.0.beta1","sha":"f706d5f945c5751072bb90d080aff154e6858435","kind":"commit","published_at":"2013-12-18T00:10:57.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.1.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v4.1.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.1.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.1.0.beta1/manifests"},{"name":"v4.0.2","sha":"98d06c6bd4eefeeb342d05116fccefa11875cb9b","kind":"tag","published_at":"2013-12-03T01:10:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.2","html_url":"https://github.com/rails/rails/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.2/manifests"},{"name":"v3.2.16","sha":"64226302d82493d9bf67aa9e4fa52b4e0269ee3d","kind":"tag","published_at":"2013-12-03T00:25:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.16","html_url":"https://github.com/rails/rails/releases/tag/v3.2.16","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.16","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.16/manifests"},{"name":"v4.0.1","sha":"5505c1d700f17e2009e1189a7aa6dafafe7062a4","kind":"commit","published_at":"2013-11-01T18:01:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.1","html_url":"https://github.com/rails/rails/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1/manifests"},{"name":"v4.0.1.rc4","sha":"9466dad7468f106bad6f8e2a0b468fb3ab113dcb","kind":"tag","published_at":"2013-10-30T19:30:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.1.rc4","html_url":"https://github.com/rails/rails/releases/tag/v4.0.1.rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.1.rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1.rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1.rc4/manifests"},{"name":"v4.0.1.rc3","sha":"b91f81c45bce0ecde0901d1a595051b8552a93fa","kind":"commit","published_at":"2013-10-23T21:38:54.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.1.rc3","html_url":"https://github.com/rails/rails/releases/tag/v4.0.1.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.1.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1.rc3/manifests"},{"name":"v4.0.1.rc2","sha":"3449a204014c2c4db2238559a75586400766adee","kind":"tag","published_at":"2013-10-21T21:52:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.1.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.0.1.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.1.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1.rc2/manifests"},{"name":"v4.0.1.rc1","sha":"3f2bc99024d25c73f5de66a36d3f897c484705b8","kind":"tag","published_at":"2013-10-17T16:42:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.1.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.0.1.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.1.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.1.rc1/manifests"},{"name":"v3.2.15","sha":"538f8ba0c16bb6c57b5b79320fc1a99afd14b0e2","kind":"tag","published_at":"2013-10-16T17:03:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.15","html_url":"https://github.com/rails/rails/releases/tag/v3.2.15","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.15","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.15/manifests"},{"name":"v3.2.15.rc3","sha":"e3abd78ee58ee8564a69c989e963ae480b8acf9f","kind":"tag","published_at":"2013-10-11T21:16:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.15.rc3","html_url":"https://github.com/rails/rails/releases/tag/v3.2.15.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.15.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.15.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.15.rc3/manifests"},{"name":"v3.2.15.rc2","sha":"5ede19b7725b9f83a2231554b6d583117fbbb4c4","kind":"tag","published_at":"2013-10-04T20:47:48.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.15.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.2.15.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.15.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.15.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.15.rc2/manifests"},{"name":"v3.2.15.rc1","sha":"5e277c82085f6258b6aa4a19a90c6ea46686af84","kind":"commit","published_at":"2013-10-03T18:52:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.15.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.15.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.15.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.15.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.15.rc1/manifests"},{"name":"v3.2.14","sha":"2fcd13eff251ca9e1ff5cf6a13f72c18087daf60","kind":"tag","published_at":"2013-07-22T16:40:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.14","html_url":"https://github.com/rails/rails/releases/tag/v3.2.14","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.14","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.14/manifests"},{"name":"v3.2.14.rc2","sha":"a96df04aac00fb2b7d91978c24741100230a50d4","kind":"tag","published_at":"2013-07-16T16:10:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.14.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.2.14.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.14.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.14.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.14.rc2/manifests"},{"name":"v3.2.14.rc1","sha":"facfc24f256d8367f33a62e3bbea6c0f8c698c1f","kind":"tag","published_at":"2013-07-13T00:23:43.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.14.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.14.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.14.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.14.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.14.rc1/manifests"},{"name":"v4.0.0","sha":"375d9a0a7fb329b0fbbd75a13e93e53a00520587","kind":"commit","published_at":"2013-06-25T14:28:29.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.0","html_url":"https://github.com/rails/rails/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.0/manifests"},{"name":"v4.0.0.rc2","sha":"7b0d3a550328f64f23f38a27864419d72b941f2f","kind":"commit","published_at":"2013-06-11T20:17:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v4.0.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.0.rc2/manifests"},{"name":"v4.0.0.rc1","sha":"1ec64297f9347986a11ce38af2cc3434d99c66c2","kind":"commit","published_at":"2013-04-29T15:29:18.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v4.0.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.0.rc1/manifests"},{"name":"v2.3.18","sha":"3773c2fc1f63daf3a6f92ef49720e801988ac990","kind":"tag","published_at":"2013-03-18T17:01:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.18","html_url":"https://github.com/rails/rails/releases/tag/v2.3.18","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.18","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.18","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.18/manifests"},{"name":"v3.2.13","sha":"a4b55827721a5967299f3c1531afb3d6d81e4ac0","kind":"tag","published_at":"2013-03-18T16:23:11.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.13","html_url":"https://github.com/rails/rails/releases/tag/v3.2.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.13/manifests"},{"name":"v3.1.12","sha":"0c510c79cb676cdb9d6a65a1fecb8d71edd123b9","kind":"tag","published_at":"2013-03-18T16:18:11.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.12","html_url":"https://github.com/rails/rails/releases/tag/v3.1.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.12/manifests"},{"name":"v3.2.13.rc2","sha":"ccf256d8dcc68d975bbf00780c3b4096f47e29d3","kind":"tag","published_at":"2013-03-06T23:05:30.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.13.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.2.13.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.13.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.13.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.13.rc2/manifests"},{"name":"v3.2.13.rc1","sha":"5ca59b02d1cc80f3463eef062ced079eb1b3998c","kind":"commit","published_at":"2013-02-27T20:19:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.13.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.13.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.13.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.13.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.13.rc1/manifests"},{"name":"v4.0.0.beta1","sha":"202041e762a98cb433c3a24a0b03308d4e05a99d","kind":"commit","published_at":"2013-02-25T23:07:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v4.0.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v4.0.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v4.0.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v4.0.0.beta1/manifests"},{"name":"v2.3.17","sha":"02d553d24cc976136c59b9278bcfbe114f334087","kind":"tag","published_at":"2013-02-11T03:14:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.17","html_url":"https://github.com/rails/rails/releases/tag/v2.3.17","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.17","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.17/manifests"},{"name":"v3.1.11","sha":"415bf3d126bac64c3b256335af45f23d2881f9bf","kind":"tag","published_at":"2013-02-11T03:08:32.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.11","html_url":"https://github.com/rails/rails/releases/tag/v3.1.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.11/manifests"},{"name":"v3.2.12","sha":"1dccd44a5c74f20b0406ecc8d39373226f73af35","kind":"tag","published_at":"2013-02-11T03:05:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.12","html_url":"https://github.com/rails/rails/releases/tag/v3.2.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.12/manifests"},{"name":"v3.0.20","sha":"b875be03b50029e94244945f072a6cbbff2e1c24","kind":"tag","published_at":"2013-01-28T20:47:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.20","html_url":"https://github.com/rails/rails/releases/tag/v3.0.20","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.20","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.20","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.20/manifests"},{"name":"v2.3.16","sha":"1169552479d6800e6729fb599dcb4a987ef13a6a","kind":"tag","published_at":"2013-01-28T20:43:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.16","html_url":"https://github.com/rails/rails/releases/tag/v2.3.16","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.16","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.16/manifests"},{"name":"v2.3.15","sha":"709af0523337e4c87760cbe118914ed0ab28d326","kind":"tag","published_at":"2013-01-08T19:27:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.15","html_url":"https://github.com/rails/rails/releases/tag/v2.3.15","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.15","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.15/manifests"},{"name":"v3.0.19","sha":"7909e7f10c82be05d989340ad49e9d9c08fb0ead","kind":"tag","published_at":"2013-01-08T19:25:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.19","html_url":"https://github.com/rails/rails/releases/tag/v3.0.19","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.19","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.19","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.19/manifests"},{"name":"v3.1.10","sha":"a7dd0bb151d925a7e3cd0aec8f61746729949985","kind":"tag","published_at":"2013-01-08T19:24:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.10","html_url":"https://github.com/rails/rails/releases/tag/v3.1.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.10/manifests"},{"name":"v3.2.11","sha":"746dbd89faf8197e6d6f35f6e428a024923116a2","kind":"tag","published_at":"2013-01-08T19:24:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.11","html_url":"https://github.com/rails/rails/releases/tag/v3.2.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.11/manifests"},{"name":"v3.0.18","sha":"fb06fe48ef45de09691718806abf088ab190a185","kind":"tag","published_at":"2012-12-23T22:31:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.18","html_url":"https://github.com/rails/rails/releases/tag/v3.0.18","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.18","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.18","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.18/manifests"},{"name":"v3.1.9","sha":"f1e977cd14b13e316ad8195f49d41608a54891c6","kind":"tag","published_at":"2012-12-23T21:39:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.9","html_url":"https://github.com/rails/rails/releases/tag/v3.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.9/manifests"},{"name":"v3.2.10","sha":"8ba3df046f977dddd4bc46248db2a1355bc0ed1e","kind":"tag","published_at":"2012-12-23T21:36:55.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.10","html_url":"https://github.com/rails/rails/releases/tag/v3.2.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.10/manifests"},{"name":"v3.2.9","sha":"b33cf74a4917c6ac5229ba8d6296d33d0b3437bd","kind":"tag","published_at":"2012-11-12T15:19:37.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.9","html_url":"https://github.com/rails/rails/releases/tag/v3.2.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.9/manifests"},{"name":"v3.2.9.rc3","sha":"db1d5f40714a47c58c13ff7d9643e8a0dec6bef8","kind":"tag","published_at":"2012-11-09T17:51:29.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.9.rc3","html_url":"https://github.com/rails/rails/releases/tag/v3.2.9.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.9.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.9.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.9.rc3/manifests"},{"name":"v3.2.9.rc2","sha":"de3dff317010df12d15225f2bca4a7e914eb596c","kind":"tag","published_at":"2012-11-01T17:38:23.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.9.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.2.9.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.9.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.9.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.9.rc2/manifests"},{"name":"v3.2.9.rc1","sha":"fdfb3990cde29c48554551d1309b06c8ef584f32","kind":"tag","published_at":"2012-10-29T16:38:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.9.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.9.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.9.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.9.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.9.rc1/manifests"},{"name":"v3.0.17","sha":"77977f34a5a4ea899f59e31ad869b582285fa5c1","kind":"tag","published_at":"2012-08-09T21:10:34.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.17","html_url":"https://github.com/rails/rails/releases/tag/v3.0.17","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.17","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.17/manifests"},{"name":"v3.1.8","sha":"38bf9cf36864b5656816b1aadf324624dbcb60b9","kind":"tag","published_at":"2012-08-09T21:10:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.8","html_url":"https://github.com/rails/rails/releases/tag/v3.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.8/manifests"},{"name":"v3.2.8","sha":"64146cf7babe35fd962576b699fa0deb4cfe0d70","kind":"tag","published_at":"2012-08-09T21:09:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.8","html_url":"https://github.com/rails/rails/releases/tag/v3.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.8/manifests"},{"name":"v3.2.8.rc2","sha":"65b5e35e898ac09a50b61c671d98a3cf92453003","kind":"tag","published_at":"2012-08-03T14:02:12.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.8.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.2.8.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.8.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.8.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.8.rc2/manifests"},{"name":"v3.2.8.rc1","sha":"fcccbacec1d25188619f597bbb75505c79084bc3","kind":"tag","published_at":"2012-08-01T20:51:11.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.8.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.8.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.8.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.8.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.8.rc1/manifests"},{"name":"v3.0.16","sha":"3166606dcbbbea5d6cc07bda233273e1dfa8821d","kind":"tag","published_at":"2012-07-26T21:59:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.16","html_url":"https://github.com/rails/rails/releases/tag/v3.0.16","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.16","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.16/manifests"},{"name":"v3.1.7","sha":"d314a48a40271552837fb795d9cde2fb516d2f78","kind":"tag","published_at":"2012-07-26T21:58:58.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.7","html_url":"https://github.com/rails/rails/releases/tag/v3.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.7/manifests"},{"name":"v3.2.7","sha":"d1b9cf2d48b4e58da2da563107dd2783e326e287","kind":"tag","published_at":"2012-07-26T21:49:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.7","html_url":"https://github.com/rails/rails/releases/tag/v3.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.7/manifests"},{"name":"v3.2.7.rc1","sha":"753c546df4c8d639a8402552bdd5c9d077610f6c","kind":"tag","published_at":"2012-07-23T21:44:33.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.7.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.7.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.7.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.7.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.7.rc1/manifests"},{"name":"v3.0.15","sha":"def75432c9ead5e717fcd7797973b90fa22b3487","kind":"tag","published_at":"2012-06-13T03:05:57.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.15","html_url":"https://github.com/rails/rails/releases/tag/v3.0.15","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.15","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.15/manifests"},{"name":"v3.0.14","sha":"4be9dbff206119798e44a2d9973c60bc02685034","kind":"tag","published_at":"2012-06-12T21:15:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.14","html_url":"https://github.com/rails/rails/releases/tag/v3.0.14","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.14","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.14/manifests"},{"name":"v3.1.6","sha":"63dce16202fb7e1517e109266c74db95f95b4cb1","kind":"tag","published_at":"2012-06-12T21:14:12.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.6","html_url":"https://github.com/rails/rails/releases/tag/v3.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.6/manifests"},{"name":"v3.2.6","sha":"8381d398cedf3e95fb073b8110d80f636cff449c","kind":"tag","published_at":"2012-06-12T21:13:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.6","html_url":"https://github.com/rails/rails/releases/tag/v3.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.6/manifests"},{"name":"v3.2.5","sha":"b57fa0bf690b299ba4d8a0051bf06b9cecd3975a","kind":"tag","published_at":"2012-06-01T03:38:09.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.5","html_url":"https://github.com/rails/rails/releases/tag/v3.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.5/manifests"},{"name":"v3.0.13","sha":"7102fe8d44a9efafac0e74c1aa479d770003f458","kind":"tag","published_at":"2012-05-31T17:55:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.13","html_url":"https://github.com/rails/rails/releases/tag/v3.0.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.13/manifests"},{"name":"v3.1.5","sha":"aa18c0cac01f63fa20095581118548c68b17a3f3","kind":"tag","published_at":"2012-05-31T17:42:43.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.5","html_url":"https://github.com/rails/rails/releases/tag/v3.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.5/manifests"},{"name":"v3.2.4","sha":"febd65223e2b3a40755d23a734f6a77e04b97c88","kind":"tag","published_at":"2012-05-31T17:27:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.4","html_url":"https://github.com/rails/rails/releases/tag/v3.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.4/manifests"},{"name":"v3.2.4.rc1","sha":"fe4dfdd64450662d882b47bf519d885edee453df","kind":"tag","published_at":"2012-05-28T19:32:12.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.4.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.4.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.4.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.4.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.4.rc1/manifests"},{"name":"v3.1.5.rc1","sha":"bd8ee8c91293b34c0c3bea1bc541cd1ada7f5b12","kind":"tag","published_at":"2012-05-28T18:55:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.5.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.1.5.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.5.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.5.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.5.rc1/manifests"},{"name":"v3.0.13.rc1","sha":"88e7f5176c3b449301636d8acdb2726f854d4644","kind":"tag","published_at":"2012-05-28T18:53:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.13.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.13.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.13.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.13.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.13.rc1/manifests"},{"name":"v3.2.3","sha":"45d6cd94b3ef2ec77166def41f29188445b35608","kind":"tag","published_at":"2012-03-30T22:22:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.3","html_url":"https://github.com/rails/rails/releases/tag/v3.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.3/manifests"},{"name":"v3.2.3.rc2","sha":"5284e650be321273a2bb68bf4baa8adeb6bc586b","kind":"tag","published_at":"2012-03-29T16:13:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.3.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.2.3.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.3.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.3.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.3.rc2/manifests"},{"name":"v3.2.3.rc1","sha":"5f3726091851326d4976624db374a20d356b1630","kind":"tag","published_at":"2012-03-27T17:07:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.3.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.3.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.3.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.3.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.3.rc1/manifests"},{"name":"v3.0.12","sha":"9d6377ed731bafbe9d20ac7e950c1c135ab02f9f","kind":"tag","published_at":"2012-03-01T17:22:32.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.12","html_url":"https://github.com/rails/rails/releases/tag/v3.0.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.12/manifests"},{"name":"v3.1.4","sha":"1aabea698b4518f37263af15818a2c9fc7565521","kind":"tag","published_at":"2012-03-01T17:20:54.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.4","html_url":"https://github.com/rails/rails/releases/tag/v3.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.4/manifests"},{"name":"v3.2.2","sha":"01b470f526922ad3fc5562a237d11d45347befa9","kind":"tag","published_at":"2012-03-01T17:17:32.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.2","html_url":"https://github.com/rails/rails/releases/tag/v3.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.2/manifests"},{"name":"v3.0.12.rc1","sha":"2935435d7058cf00da3989b0e60a28b1472509bd","kind":"tag","published_at":"2012-02-22T21:31:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.12.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.12.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.12.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.12.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.12.rc1/manifests"},{"name":"v3.1.4.rc1","sha":"8c677e921a1116085b00b522cea6204587c09754","kind":"tag","published_at":"2012-02-22T20:06:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.4.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.1.4.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.4.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.4.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.4.rc1/manifests"},{"name":"v3.2.2.rc1","sha":"4bcd437f760cfaf310fece0fe36abe55bccba42b","kind":"tag","published_at":"2012-02-22T20:03:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.2.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.2.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.2.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.2.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.2.rc1/manifests"},{"name":"v3.2.1","sha":"67b8fbca921ba7e3e1fc02fe30a20963a67017e5","kind":"tag","published_at":"2012-01-26T22:58:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.1/manifests"},{"name":"v3.2.0","sha":"f36dcaf488b4357a52f43e3912628428956d351f","kind":"commit","published_at":"2012-01-20T16:44:32.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.0","html_url":"https://github.com/rails/rails/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.0/manifests"},{"name":"v3.2.0.rc2","sha":"d268ef2f6599cd58cc27a8c9f0b9b6649f62e6a2","kind":"tag","published_at":"2012-01-04T21:00:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.2.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.0.rc2/manifests"},{"name":"v3.2.0.rc1","sha":"9d6e52b55ec67d0573a0bb1900b13f38e18f7eba","kind":"commit","published_at":"2011-12-20T00:34:57.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.2.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.2.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.2.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.2.0.rc1/manifests"},{"name":"v3.1.3","sha":"e9474c89d9583d50be485bef8fabb31a75b242bb","kind":"commit","published_at":"2011-11-20T22:48:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.3","html_url":"https://github.com/rails/rails/releases/tag/v3.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.3/manifests"},{"name":"v3.1.2","sha":"0e6b118313b5603482df071e30434ddab758f8a1","kind":"commit","published_at":"2011-11-18T01:27:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.2","html_url":"https://github.com/rails/rails/releases/tag/v3.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.2/manifests"},{"name":"v3.0.11","sha":"66a4beb0c9764238e1e8bed83aca88a397039bde","kind":"commit","published_at":"2011-11-18T01:19:17.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.11","html_url":"https://github.com/rails/rails/releases/tag/v3.0.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.11/manifests"},{"name":"v3.1.2.rc2","sha":"e29f27ad76b6e031f21bc258a6ff713ec9a16365","kind":"commit","published_at":"2011-11-14T15:44:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.2.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.1.2.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.2.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.2.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.2.rc2/manifests"},{"name":"v3.1.2.rc1","sha":"68ed8eae304b64c5049badda6a2cf854b5949831","kind":"commit","published_at":"2011-11-14T14:12:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.2.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.1.2.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.2.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.2.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.2.rc1/manifests"},{"name":"v3.1.1","sha":"ba708126d85a020f8984db1a12261bcdba47d70f","kind":"tag","published_at":"2011-10-07T15:14:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.1","html_url":"https://github.com/rails/rails/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.1/manifests"},{"name":"v3.1.1.rc3","sha":"57a01f337eb4da7941ec35e5541fa456b060601a","kind":"tag","published_at":"2011-10-06T02:27:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.1.rc3","html_url":"https://github.com/rails/rails/releases/tag/v3.1.1.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.1.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.1.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.1.rc3/manifests"},{"name":"v3.1.1.rc2","sha":"aead5720d75ef3e2babb8d115a8587b2736a5b3b","kind":"tag","published_at":"2011-09-29T22:13:53.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.1.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.1.1.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.1.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.1.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.1.rc2/manifests"},{"name":"v3.1.1.rc1","sha":"3f9665be11f9938baa9f617f3391cc0d7e3ff10b","kind":"tag","published_at":"2011-09-15T00:17:28.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.1.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.1.1.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.1.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.1.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.1.rc1/manifests"},{"name":"v3.1.0","sha":"505e84599aff6abf719484636b0515e1ce2e2220","kind":"tag","published_at":"2011-08-31T02:10:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0/manifests"},{"name":"v3.1.0.rc8","sha":"c4ce550f3e28a1dbc4716afc9957f2ec3c426782","kind":"tag","published_at":"2011-08-29T03:23:53.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0.rc8","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0.rc8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0.rc8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc8/manifests"},{"name":"v3.1.0.rc7","sha":"e4fc8e22c17e222b3057d2b053ba5586a7260db0","kind":"tag","published_at":"2011-08-28T23:55:58.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0.rc7","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0.rc7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0.rc7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc7/manifests"},{"name":"v3.1.0.rc6","sha":"633a5693a7c304ec242488dc5aa11c8956b3b294","kind":"tag","published_at":"2011-08-16T22:30:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0.rc6","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0.rc6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0.rc6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc6/manifests"},{"name":"v3.0.10","sha":"4f15f392601d4504fab850f3bf659c43f0cb51ec","kind":"tag","published_at":"2011-08-16T22:10:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.10","html_url":"https://github.com/rails/rails/releases/tag/v3.0.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.10/manifests"},{"name":"v2.3.14","sha":"e0774e47302a907319ed974ccf59b8b54d32bbde","kind":"tag","published_at":"2011-08-16T21:59:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.14","html_url":"https://github.com/rails/rails/releases/tag/v2.3.14","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.14","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.14/manifests"},{"name":"v2.3.13","sha":"dea5a10f716b84a49e3d8fa44efbd3bf1ff1bfda","kind":"tag","published_at":"2011-08-16T21:50:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.13","html_url":"https://github.com/rails/rails/releases/tag/v2.3.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.13/manifests"},{"name":"v3.0.10.rc1","sha":"521c9aa6a85fdb4c6d43d2aeb1af7b4cae2a20f5","kind":"tag","published_at":"2011-08-05T00:10:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.10.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.10.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.10.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.10.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.10.rc1/manifests"},{"name":"v3.1.0.rc5","sha":"a5188333aaf219e4000614f49748f459b79b6ef9","kind":"tag","published_at":"2011-07-25T23:06:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0.rc5","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0.rc5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0.rc5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc5/manifests"},{"name":"v3.0.9","sha":"15e2b5887f2185e01b8d92646a7f441b8c1c549e","kind":"commit","published_at":"2011-06-16T10:03:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.9","html_url":"https://github.com/rails/rails/releases/tag/v3.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9/manifests"},{"name":"v3.0.9.rc5","sha":"6824c5d1d303f5bbc5c5d390390204fcc0cd6ced","kind":"commit","published_at":"2011-06-12T21:28:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.9.rc5","html_url":"https://github.com/rails/rails/releases/tag/v3.0.9.rc5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.9.rc5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc5/manifests"},{"name":"v3.0.9.rc4","sha":"f283194234669d2034653445ca018582dc382c0e","kind":"commit","published_at":"2011-06-12T21:21:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.9.rc4","html_url":"https://github.com/rails/rails/releases/tag/v3.0.9.rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.9.rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc4/manifests"},{"name":"v3.1.0.rc4","sha":"279781f8964c95f842153c98dc245b06f1b1f76e","kind":"commit","published_at":"2011-06-09T22:53:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0.rc4","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0.rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0.rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc4/manifests"},{"name":"v3.0.9.rc3","sha":"66ec7e84c9710aea7397e9ad92e87063b857c9d5","kind":"commit","published_at":"2011-06-09T22:48:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.9.rc3","html_url":"https://github.com/rails/rails/releases/tag/v3.0.9.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.9.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc3/manifests"},{"name":"v3.0.9.rc2","sha":"0e1ecb2e15ab8eaf5641e2ca9eb1c13bf5b304a0","kind":"commit","published_at":"2011-06-09T22:36:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.9.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.0.9.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.9.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc2/manifests"},{"name":"v3.1.0.rc3","sha":"aefd703443807598552f3ea2c81e4e9cb15349df","kind":"tag","published_at":"2011-06-08T21:34:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0.rc3","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc3/manifests"},{"name":"v3.0.9.rc1","sha":"0c1608c4edccbf2a1b6b53d8f1ab7ccacc8cbc65","kind":"tag","published_at":"2011-06-08T21:18:10.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.9.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.9.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.9.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.9.rc1/manifests"},{"name":"v2.3.12","sha":"a2a34133d8347d83c015b1889a774c718644e4d6","kind":"tag","published_at":"2011-06-07T23:55:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.12","html_url":"https://github.com/rails/rails/releases/tag/v2.3.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.12/manifests"},{"name":"v3.0.8","sha":"b341e45d8e75d49a9f599881eea952c2a41af032","kind":"tag","published_at":"2011-06-07T23:52:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.8","html_url":"https://github.com/rails/rails/releases/tag/v3.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8/manifests"},{"name":"v3.1.0.rc2","sha":"d846f4baa5da299d51c72f1bdd098cf982279628","kind":"tag","published_at":"2011-06-07T23:48:30.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc2/manifests"},{"name":"v3.0.8.rc4","sha":"ce23c6e47f184616c8cc9b779c1670e1417adfd0","kind":"tag","published_at":"2011-05-31T00:09:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.8.rc4","html_url":"https://github.com/rails/rails/releases/tag/v3.0.8.rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.8.rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8.rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8.rc4/manifests"},{"name":"v3.0.8.rc3","sha":"f4073d530f76ebd5371017032874e5865ebd8ecb","kind":"tag","published_at":"2011-05-30T19:54:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.8.rc3","html_url":"https://github.com/rails/rails/releases/tag/v3.0.8.rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.8.rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8.rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8.rc3/manifests"},{"name":"v3.0.8.rc2","sha":"d75652540e8bb9fd565e1d251e6fcd9c3f2e8516","kind":"tag","published_at":"2011-05-27T16:30:00.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.8.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.0.8.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.8.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8.rc2/manifests"},{"name":"v3.0.8.rc1","sha":"8b0806e1b0ea2dbe31ab25cfba298425fd0369f4","kind":"tag","published_at":"2011-05-26T00:08:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.8.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.8.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.8.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.8.rc1/manifests"},{"name":"v3.1.0.rc1","sha":"82857adc56efd16d22821971fff4c5e24a3c5b55","kind":"commit","published_at":"2011-05-22T01:56:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.rc1/manifests"},{"name":"v3.1.0.beta1","sha":"169ae75e091392e3852d0dfb56fadacef4b7a20b","kind":"commit","published_at":"2011-05-05T01:21:05.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.1.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v3.1.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.1.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.1.0.beta1/manifests"},{"name":"v3.0.7","sha":"2c3260147f90e35a6a5e3ce1b520b4de701e701e","kind":"tag","published_at":"2011-04-18T21:03:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.7","html_url":"https://github.com/rails/rails/releases/tag/v3.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.7/manifests"},{"name":"v3.0.7.rc2","sha":"f96ad0d582fd275c6f069e31fe716406a0ba924d","kind":"tag","published_at":"2011-04-15T17:23:20.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.7.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.0.7.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.7.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.7.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.7.rc2/manifests"},{"name":"v3.0.7.rc1","sha":"1787447ada8cf224bf5552c6ae8a3db053fa5839","kind":"tag","published_at":"2011-04-14T21:48:42.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.7.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.7.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.7.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.7.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.7.rc1/manifests"},{"name":"v3.0.6","sha":"38df020c95beca7e12f0188cb7e18f3c37789e20","kind":"tag","published_at":"2011-04-05T22:58:48.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.6","html_url":"https://github.com/rails/rails/releases/tag/v3.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.6/manifests"},{"name":"v3.0.6.rc2","sha":"b13be616a11ffa2c489e1b3ee4ae54e234990fcf","kind":"tag","published_at":"2011-03-31T05:26:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.6.rc2","html_url":"https://github.com/rails/rails/releases/tag/v3.0.6.rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.6.rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.6.rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.6.rc2/manifests"},{"name":"v3.0.6.rc1","sha":"ba117b2b43a00c282bb4905fb003dd169a5312df","kind":"tag","published_at":"2011-03-29T21:04:42.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.6.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.6.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.6.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.6.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.6.rc1/manifests"},{"name":"v3.0.5","sha":"ecc6bb597fba7512e4eb34566fb2e8eaae9e39b8","kind":"tag","published_at":"2011-02-27T02:28:55.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.5","html_url":"https://github.com/rails/rails/releases/tag/v3.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.5/manifests"},{"name":"v3.0.5.rc1","sha":"ef31b87d8297d0473b73a9c2cdc5b3a7395fae06","kind":"tag","published_at":"2011-02-23T19:13:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.5.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.5.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.5.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.5.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.5.rc1/manifests"},{"name":"v3.0.4","sha":"1081ea66a3d864f310a1a55f22229af4e10436a7","kind":"tag","published_at":"2011-02-08T21:24:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.4","html_url":"https://github.com/rails/rails/releases/tag/v3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.4/manifests"},{"name":"v2.3.11","sha":"b0c3d451a242b53c9992cafa9108d0df52b4f2f0","kind":"tag","published_at":"2011-02-08T21:23:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.11","html_url":"https://github.com/rails/rails/releases/tag/v2.3.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.11/manifests"},{"name":"v3.0.4.rc1","sha":"0cbf9b2946c02a5057958dbd47bc164be16cbab2","kind":"tag","published_at":"2011-01-30T22:56:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.4.rc1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.4.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.4.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.4.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.4.rc1/manifests"},{"name":"v3.0.3","sha":"0aca27d407a339683665dcbb2199a1337972bb5e","kind":"commit","published_at":"2010-11-16T16:26:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.3","html_url":"https://github.com/rails/rails/releases/tag/v3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.3/manifests"},{"name":"v3.0.2","sha":"186e3c71f95316b94e728eb62b519d074d27cea3","kind":"commit","published_at":"2010-11-15T19:23:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.2","html_url":"https://github.com/rails/rails/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.2/manifests"},{"name":"v3.0.1","sha":"bac6ba99b11515374d3251ee4a1d1f3a0002713c","kind":"tag","published_at":"2010-10-14T20:57:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.1/manifests"},{"name":"v2.3.10","sha":"f5ed5c317e2280e41a9185c3000e7fbd1f7b3176","kind":"tag","published_at":"2010-10-14T20:06:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.10","html_url":"https://github.com/rails/rails/releases/tag/v2.3.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.10/manifests"},{"name":"v2.3.9","sha":"a61a39ecd44153676cc56257bbe8bbdf9a727cf9","kind":"commit","published_at":"2010-09-04T21:36:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.9","html_url":"https://github.com/rails/rails/releases/tag/v2.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.9/manifests"},{"name":"v2.3.9.pre","sha":"b2c91983dcb5e2a21ea2c0be28f86ad33b48f660","kind":"commit","published_at":"2010-08-30T03:19:05.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.9.pre","html_url":"https://github.com/rails/rails/releases/tag/v2.3.9.pre","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.9.pre","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.9.pre","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.9.pre/manifests"},{"name":"v3.0.0","sha":"9891ca89c69732a21743f0349f2995956a7802e7","kind":"commit","published_at":"2010-08-29T22:00:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.0","html_url":"https://github.com/rails/rails/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0/manifests"},{"name":"v3.0.0_RC2","sha":"822fa17c6c0f159eeff01c8fb251e13666f50357","kind":"commit","published_at":"2010-08-24T02:40:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.0_RC2","html_url":"https://github.com/rails/rails/releases/tag/v3.0.0_RC2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.0_RC2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0_RC2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0_RC2/manifests"},{"name":"v3.0.0_RC","sha":"b6f99325613baf0534c10677da9c82ac27b628c0","kind":"commit","published_at":"2010-07-26T21:40:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.0_RC","html_url":"https://github.com/rails/rails/releases/tag/v3.0.0_RC","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.0_RC","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0_RC","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0_RC/manifests"},{"name":"v3.0.0.beta4","sha":"df40dbe6f13c6799e972b20dcc1fbf11f0a02c61","kind":"commit","published_at":"2010-06-08T22:10:27.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.0.beta4","html_url":"https://github.com/rails/rails/releases/tag/v3.0.0.beta4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.0.beta4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta4/manifests"},{"name":"v2.3.8","sha":"240f4e944cd90fca138aba8467456043952110cc","kind":"commit","published_at":"2010-05-25T03:53:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.8","html_url":"https://github.com/rails/rails/releases/tag/v2.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.8/manifests"},{"name":"v2.3.7","sha":"326188c25efa3721a7e2f68cea3534b3e2850fcf","kind":"commit","published_at":"2010-05-24T07:04:41.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.7","html_url":"https://github.com/rails/rails/releases/tag/v2.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.7/manifests"},{"name":"v2.3.6","sha":"56bb5504dd1fc7314f1bd7a489ddaff973668be2","kind":"commit","published_at":"2010-05-23T06:53:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.6","html_url":"https://github.com/rails/rails/releases/tag/v2.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.6/manifests"},{"name":"v3.0.0.beta3","sha":"8e9df34fa3fd22719d939ba72f19b3ae9ffcc018","kind":"commit","published_at":"2010-04-13T21:07:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.0.beta3","html_url":"https://github.com/rails/rails/releases/tag/v3.0.0.beta3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.0.beta3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta3/manifests"},{"name":"v3.0.0.beta.3","sha":"8e9df34fa3fd22719d939ba72f19b3ae9ffcc018","kind":"commit","published_at":"2010-04-13T21:07:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.0.beta.3","html_url":"https://github.com/rails/rails/releases/tag/v3.0.0.beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.0.beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta.3/manifests"},{"name":"v3.0.0.beta2","sha":"f0364d87f03d58312bcab1b2f17b5b56b6c72653","kind":"commit","published_at":"2010-04-01T21:20:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.0.beta2","html_url":"https://github.com/rails/rails/releases/tag/v3.0.0.beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.0.beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta2/manifests"},{"name":"v3.0.0.beta.2","sha":"f0364d87f03d58312bcab1b2f17b5b56b6c72653","kind":"commit","published_at":"2010-04-01T21:20:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.0.beta.2","html_url":"https://github.com/rails/rails/releases/tag/v3.0.0.beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.0.beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta.2/manifests"},{"name":"v3.0.0.beta1","sha":"c548e213658386f3a5b00097bc5b30bf3736e6b4","kind":"commit","published_at":"2010-02-05T17:24:12.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v3.0.0.beta1","html_url":"https://github.com/rails/rails/releases/tag/v3.0.0.beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v3.0.0.beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v3.0.0.beta1/manifests"},{"name":"v2.3.5","sha":"bfe032858077bb2946abe25e95e485ba6da86bd5","kind":"tag","published_at":"2009-11-27T00:26:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.5","html_url":"https://github.com/rails/rails/releases/tag/v2.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.5/manifests"},{"name":"v2.2.3","sha":"a60779f7e69a7045a308844e9464d7d6b9cac94d","kind":"tag","published_at":"2009-09-23T22:13:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.2.3","html_url":"https://github.com/rails/rails/releases/tag/v2.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.2.3/manifests"},{"name":"v2.3.4","sha":"a43ef2436cc6b63af35636127e42495ceb538cee","kind":"tag","published_at":"2009-09-04T00:16:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.4","html_url":"https://github.com/rails/rails/releases/tag/v2.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.4/manifests"},{"name":"v2.3.3.1","sha":"c7bcbb983f84e306e2b43adb698060e060605de9","kind":"tag","published_at":"2009-07-19T05:29:57.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.3.1","html_url":"https://github.com/rails/rails/releases/tag/v2.3.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.3.1/manifests"},{"name":"v2.3.3","sha":"a147becfb86b689ab25e92edcfbb4bcc04108099","kind":"tag","published_at":"2009-07-16T04:25:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.3","html_url":"https://github.com/rails/rails/releases/tag/v2.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.3/manifests"},{"name":"v2.3.2.1","sha":"dc88847e5ce392eed210b97525c14fca55852867","kind":"commit","published_at":"2009-03-17T12:26:34.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.2.1","html_url":"https://github.com/rails/rails/releases/tag/v2.3.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.2.1/manifests"},{"name":"v2.3.2","sha":"73fc42cc0b5e94541480032c2941a50edd4080c2","kind":"commit","published_at":"2009-03-16T03:06:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.2","html_url":"https://github.com/rails/rails/releases/tag/v2.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.2/manifests"},{"name":"v2.3.1","sha":"b1c989f28dd1d619f0e3e3ca1b894b686e517f2f","kind":"commit","published_at":"2009-03-05T11:22:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.1","html_url":"https://github.com/rails/rails/releases/tag/v2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.1/manifests"},{"name":"v2.3.0","sha":"beca1f2e151558ded3d5a4efebd328ab2533edc6","kind":"commit","published_at":"2009-02-02T00:21:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.3.0","html_url":"https://github.com/rails/rails/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.3.0/manifests"},{"name":"v2.2.2","sha":"ff561370739eb809d1d006ea842cd2b1e43f6950","kind":"commit","published_at":"2008-11-21T16:25:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.2.2","html_url":"https://github.com/rails/rails/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"44c3b865ac52a7c9a6312982ba0f6c20d7ad41e1","kind":"commit","published_at":"2008-11-14T15:11:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.2.1","html_url":"https://github.com/rails/rails/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"a17fc20eb122d45a017e99e592e5e159025ab26b","kind":"tag","published_at":"2008-10-24T14:42:03.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.2.0","html_url":"https://github.com/rails/rails/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.2.0/manifests"},{"name":"v2.1.2","sha":"15af6b315ee65afbc873889b6ad81b7e6b7e1b35","kind":"commit","published_at":"2008-10-23T16:16:55.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.1.2","html_url":"https://github.com/rails/rails/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.1.2/manifests"},{"name":"v2.0.4","sha":"e724e3ede67b4199db8765e00d370e6a7bd401e6","kind":"tag","published_at":"2008-10-20T06:45:15.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.0.4","html_url":"https://github.com/rails/rails/releases/tag/v2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.4/manifests"},{"name":"v2.0.5","sha":"c329794e7334f3d355d0a039e23a7145ad40ed35","kind":"tag","published_at":"2008-10-19T20:22:27.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.0.5","html_url":"https://github.com/rails/rails/releases/tag/v2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.5/manifests"},{"name":"v2.1.1","sha":"d4eb3c0b7d13d3898c14d6ea7bfbc1853394f4e8","kind":"commit","published_at":"2008-09-04T14:31:40.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.1.1","html_url":"https://github.com/rails/rails/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"71528b1825ce5184b23d09f923cb72f4073ce8ed","kind":"commit","published_at":"2008-06-01T00:22:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.1.0","html_url":"https://github.com/rails/rails/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.1.0/manifests"},{"name":"v2.0.3","sha":"44d721c193e5bc9d1fd9073ff65a241039467d7a","kind":"tag","published_at":"2008-05-12T00:04:24.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.0.3","html_url":"https://github.com/rails/rails/releases/tag/v2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.3/manifests"},{"name":"v2.1.0_RC1","sha":"d2212c1601dcd67e72e9d52f98347d3285fd7134","kind":"tag","published_at":"2008-05-12T00:02:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.1.0_RC1","html_url":"https://github.com/rails/rails/releases/tag/v2.1.0_RC1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.1.0_RC1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.1.0_RC1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.1.0_RC1/manifests"},{"name":"v2.0.2","sha":"c8da518bbfedc2a06b1d96912ddae00e57f21748","kind":"tag","published_at":"2008-04-11T00:25:55.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.0.2","html_url":"https://github.com/rails/rails/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"db885e81b9dc918a75bd66b1631a13e10447d0ff","kind":"tag","published_at":"2008-04-11T00:25:53.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.0.1","html_url":"https://github.com/rails/rails/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.1/manifests"},{"name":"v2.0.0_RC2","sha":"1d32cec17d768ac78d52903f5ed8b19cc37c7f78","kind":"tag","published_at":"2008-04-11T00:25:52.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.0.0_RC2","html_url":"https://github.com/rails/rails/releases/tag/v2.0.0_RC2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.0.0_RC2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.0_RC2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.0_RC2/manifests"},{"name":"v2.0.0_RC1","sha":"0f2c6302a19abce498d6cdbd44df0131c51fc8a3","kind":"tag","published_at":"2008-04-11T00:25:50.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.0.0_RC1","html_url":"https://github.com/rails/rails/releases/tag/v2.0.0_RC1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.0.0_RC1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.0_RC1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.0_RC1/manifests"},{"name":"v2.0.0_PR","sha":"7275d2749cb829d89bffe7e6aa87c99084351f6a","kind":"tag","published_at":"2008-04-11T00:25:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.0.0_PR","html_url":"https://github.com/rails/rails/releases/tag/v2.0.0_PR","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.0.0_PR","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.0_PR","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.0_PR/manifests"},{"name":"v2.0.0","sha":"db885e81b9dc918a75bd66b1631a13e10447d0ff","kind":"tag","published_at":"2008-04-11T00:25:47.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v2.0.0","html_url":"https://github.com/rails/rails/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v2.0.0/manifests"},{"name":"v1.2.6","sha":"9c190098e0f80cf2638223142f335ffb25212b86","kind":"tag","published_at":"2008-04-11T00:25:45.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.2.6","html_url":"https://github.com/rails/rails/releases/tag/v1.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.6/manifests"},{"name":"v1.2.5","sha":"d201969236f1696e70c73e12a93229feac69ceda","kind":"tag","published_at":"2008-04-11T00:25:44.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.2.5","html_url":"https://github.com/rails/rails/releases/tag/v1.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.5/manifests"},{"name":"v1.2.4","sha":"478cd8223c5ef43abbbb347c5517910a5ab91b67","kind":"tag","published_at":"2008-04-11T00:25:42.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.2.4","html_url":"https://github.com/rails/rails/releases/tag/v1.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.4/manifests"},{"name":"v1.2.3","sha":"30549718ac827f3ae8c7afc8dc9a6bf639e4e65c","kind":"tag","published_at":"2008-04-11T00:25:41.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.2.3","html_url":"https://github.com/rails/rails/releases/tag/v1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.3/manifests"},{"name":"v1.2.2","sha":"e73bdfc31be5acfddefdff6fa40515c145241f52","kind":"tag","published_at":"2008-04-11T00:25:39.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.2.2","html_url":"https://github.com/rails/rails/releases/tag/v1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.2/manifests"},{"name":"v1.2.1","sha":"03e763ffc823531ea5a5a3be7134318f85370139","kind":"tag","published_at":"2008-04-11T00:25:37.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.2.1","html_url":"https://github.com/rails/rails/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.1/manifests"},{"name":"v1.2.0_RC2","sha":"83a21f75cf518b7f50581041cfce038c196a56b5","kind":"tag","published_at":"2008-04-11T00:25:36.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.2.0_RC2","html_url":"https://github.com/rails/rails/releases/tag/v1.2.0_RC2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.2.0_RC2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.0_RC2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.0_RC2/manifests"},{"name":"v1.2.0_RC1","sha":"12949bbc135a33c9618e7816105d70b8a9c7e426","kind":"tag","published_at":"2008-04-11T00:25:34.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.2.0_RC1","html_url":"https://github.com/rails/rails/releases/tag/v1.2.0_RC1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.2.0_RC1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.0_RC1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.0_RC1/manifests"},{"name":"v1.2.0","sha":"5988aaa50e72643b021ec5e8562d14a39b4f54e1","kind":"tag","published_at":"2008-04-11T00:25:31.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.2.0","html_url":"https://github.com/rails/rails/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.2.0/manifests"},{"name":"v1.1.6","sha":"e071b60e17913e210baf9bf77c4c5c0bb344d999","kind":"tag","published_at":"2008-04-11T00:25:29.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.1.6","html_url":"https://github.com/rails/rails/releases/tag/v1.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.6/manifests"},{"name":"v1.1.5","sha":"4874df1d674bccbe2fa41a12bb93fa63a5d489ee","kind":"tag","published_at":"2008-04-11T00:25:28.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.1.5","html_url":"https://github.com/rails/rails/releases/tag/v1.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.5/manifests"},{"name":"v1.1.4","sha":"14f11a73ed8cd50fa9075e3f068feaf3b89686ba","kind":"tag","published_at":"2008-04-11T00:25:26.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.1.4","html_url":"https://github.com/rails/rails/releases/tag/v1.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.4/manifests"},{"name":"v1.1.3","sha":"0c516b370b08e3e095fe24cc0e2b8d52fdecf9e0","kind":"tag","published_at":"2008-04-11T00:25:25.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.1.3","html_url":"https://github.com/rails/rails/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.3/manifests"},{"name":"v1.1.2","sha":"83824935518f62cee9cc1c120b125085072f583c","kind":"tag","published_at":"2008-04-11T00:25:21.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.1.2","html_url":"https://github.com/rails/rails/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"496725022a09cd2100e1550745064fb5a6308ee4","kind":"tag","published_at":"2008-04-11T00:25:19.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.1.1","html_url":"https://github.com/rails/rails/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.1/manifests"},{"name":"v1.1.0_RC1","sha":"330823687bbae1c05af6545912377d317300c1bb","kind":"tag","published_at":"2008-04-11T00:25:18.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.1.0_RC1","html_url":"https://github.com/rails/rails/releases/tag/v1.1.0_RC1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.1.0_RC1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.0_RC1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.0_RC1/manifests"},{"name":"v1.1.0","sha":"9babb2014ba101e8c4a7b7808c3e3624ee7bb8d7","kind":"tag","published_at":"2008-04-11T00:25:16.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.1.0","html_url":"https://github.com/rails/rails/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.1.0/manifests"},{"name":"v1.0.0","sha":"37e0d5de899cfbb3703067daefe2546215aaa4cc","kind":"tag","published_at":"2008-04-11T00:25:14.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v1.0.0","html_url":"https://github.com/rails/rails/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v1.0.0/manifests"},{"name":"v0.9.5","sha":"11611c1b002243a766c86c374b812c61a5b672c7","kind":"tag","published_at":"2008-04-11T00:25:13.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.9.5","html_url":"https://github.com/rails/rails/releases/tag/v0.9.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.9.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.5/manifests"},{"name":"v0.9.4.1","sha":"03e44cbcb2426a97dd35f76bc2ac6491c69821b1","kind":"tag","published_at":"2008-04-11T00:25:11.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.9.4.1","html_url":"https://github.com/rails/rails/releases/tag/v0.9.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.9.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.4.1/manifests"},{"name":"v0.9.4","sha":"3b9be80a3a6b83156562d218e459822a51d6795c","kind":"tag","published_at":"2008-04-11T00:25:10.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.9.4","html_url":"https://github.com/rails/rails/releases/tag/v0.9.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.9.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.4/manifests"},{"name":"v0.9.3","sha":"b3739fca2c185831c97efdd9fdcaa23476863539","kind":"tag","published_at":"2008-04-11T00:25:08.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.9.3","html_url":"https://github.com/rails/rails/releases/tag/v0.9.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.9.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.3/manifests"},{"name":"v0.9.2","sha":"d9c0a37f37402fa128302b7c048201d2180a029e","kind":"tag","published_at":"2008-04-11T00:25:07.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.9.2","html_url":"https://github.com/rails/rails/releases/tag/v0.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.2/manifests"},{"name":"v0.9.1","sha":"ed14042feac6ff84670958fc3e2017aaacac5856","kind":"tag","published_at":"2008-04-11T00:25:06.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.9.1","html_url":"https://github.com/rails/rails/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.9.1/manifests"},{"name":"v0.14.4","sha":"93bd3b00e16cb6d79d38480e1827935067c8c771","kind":"tag","published_at":"2008-04-11T00:25:04.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.14.4","html_url":"https://github.com/rails/rails/releases/tag/v0.14.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.14.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.14.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.14.4/manifests"},{"name":"v0.14.3","sha":"c2eb22e5c69caba0f9eeb5b95558837d0d572f44","kind":"tag","published_at":"2008-04-11T00:25:02.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.14.3","html_url":"https://github.com/rails/rails/releases/tag/v0.14.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.14.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.14.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.14.3/manifests"},{"name":"v0.14.2","sha":"98b0b117f755a5d27ac5161dc7d0757c3c217230","kind":"tag","published_at":"2008-04-11T00:25:01.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.14.2","html_url":"https://github.com/rails/rails/releases/tag/v0.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.14.2/manifests"},{"name":"v0.14.1","sha":"b437eee41d38188f10f11e041b82d7def0a20629","kind":"tag","published_at":"2008-04-11T00:24:59.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.14.1","html_url":"https://github.com/rails/rails/releases/tag/v0.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.14.1/manifests"},{"name":"v0.13.1","sha":"1911f8eee928915f1020753a4a3ba34c81131a66","kind":"tag","published_at":"2008-04-11T00:24:57.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.13.1","html_url":"https://github.com/rails/rails/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"a0d31fcd81ef690adf56568aa954a07081c6aecc","kind":"tag","published_at":"2008-04-11T00:24:56.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.13.0","html_url":"https://github.com/rails/rails/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.13.0/manifests"},{"name":"v0.12.0","sha":"0270b26e41f33d66af3a2bea1371af037b0b5923","kind":"tag","published_at":"2008-04-11T00:24:54.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.12.0","html_url":"https://github.com/rails/rails/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.12.0/manifests"},{"name":"v0.11.1","sha":"f7b89667ac4157d64697aa2f51bcea8a26c0fd8f","kind":"tag","published_at":"2008-04-11T00:24:53.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.11.1","html_url":"https://github.com/rails/rails/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"61d236d94133fb7ae2f0dce0badaf2bf07b301b7","kind":"tag","published_at":"2008-04-11T00:24:51.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.11.0","html_url":"https://github.com/rails/rails/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.11.0/manifests"},{"name":"v0.10.1","sha":"25b656fefa75954cffff119a14cf7650f4f99a92","kind":"tag","published_at":"2008-04-11T00:24:49.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.10.1","html_url":"https://github.com/rails/rails/releases/tag/v0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.10.1/manifests"},{"name":"v0.10.0","sha":"e2724aa1856253f4fc48ddc251583042c5f06029","kind":"tag","published_at":"2008-04-11T00:24:46.000Z","download_url":"https://codeload.github.com/rails/rails/tar.gz/v0.10.0","html_url":"https://github.com/rails/rails/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/rails/rails@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/tags/v0.10.0/manifests"}]},"repo_metadata_updated_at":"2026-10-28T09:25:55.953Z","dependent_packages_count":1688,"downloads":846243800,"downloads_period":"total","dependent_repos_count":876080,"rankings":{"downloads":0.020628672740045272,"dependent_repos_count":0.012265697304891783,"dependent_packages_count":0.030664243262229458,"stargazers_count":0.0016725950870306978,"forks_count":0.0011150633913537984,"docker_downloads_count":0.1432856457889631,"average":0.034938652929085684},"purl":"pkg:gem/actionpack","advisories":[{"uuid":"GSA_kwCzR0hTQS1wZ200LTQzOWMtNWpwNs4ABUDA","url":"https://github.com/advisories/GHSA-pgm4-439c-5jp6","title":"Rails has a possible XSS vulnerability in its Action Pack debug exceptions","description":"### Impact\nThe debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary HTML and JavaScript into the page, leading to XSS. This affects applications with detailed exception pages enabled (`config.consider_all_requests_local = true`), which is the default in development.\n\n### Releases\nThe fixed releases are available at the normal locations.\n\n### Credit\nThis issue was responsibly reported by Hackerone researcher [fbettag](https://hackerone.com/fbettag).","origin":"UNSPECIFIED","severity":"LOW","published_at":"2026-03-23T20:45:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":1.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U","references":["https://github.com/rails/rails/security/advisories/GHSA-pgm4-439c-5jp6","https://github.com/rails/rails/commit/6752711c8c31d79ba50d13af6a6698a3b85415e0","https://github.com/rails/rails/releases/tag/v8.1.2.1","https://nvd.nist.gov/vuln/detail/CVE-2026-33167","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2026-33167.yml","https://github.com/advisories/GHSA-pgm4-439c-5jp6"],"source_kind":"github","identifiers":["GHSA-pgm4-439c-5jp6","CVE-2026-33167"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-23T21:00:09.256Z","updated_at":"2026-10-26T21:04:52.651Z","epss_percentage":0.0026,"epss_percentile":0.17587,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wZ200LTQzOWMtNWpwNs4ABUDA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wZ200LTQzOWMtNWpwNs4ABUDA","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"8.1.2.1","vulnerable_version_range":"\u003e= 8.1.0, \u003c 8.1.2.1"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wZ200LTQzOWMtNWpwNs4ABUDA/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12Zm01LXJtcmgtajI2ds4ABCQK","url":"https://github.com/advisories/GHSA-vfm5-rmrh-j26v","title":"Possible Content Security Policy bypass in Action Dispatch","description":"There is a possible Cross Site Scripting (XSS) vulnerability  in the `content_security_policy` helper in Action Pack.\n\nImpact\n------\nApplications which set Content-Security-Policy (CSP) headers dynamically from untrusted user input may be vulnerable to carefully crafted inputs being able to inject new directives into the CSP. This could lead to a bypass of the CSP and its protection against XSS and other attacks.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nApplications can avoid setting CSP headers dynamically from untrusted input, or can validate/sanitize that input.\n\nCredits\n-------\nThanks to [ryotak](https://hackerone.com/ryotak) for the report!","origin":"UNSPECIFIED","severity":"LOW","published_at":"2024-12-10T22:42:27.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":2.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":["https://github.com/rails/rails/security/advisories/GHSA-vfm5-rmrh-j26v","https://nvd.nist.gov/vuln/detail/CVE-2024-54133","https://github.com/rails/rails/commit/2e3f41e4538b9ca1044357f6644f037bbb7c6c49","https://github.com/rails/rails/commit/3da2479cfe1e00177114b17e496213c40d286b3a","https://github.com/rails/rails/commit/5558e72f22fc69c1c407b31ac5fb3b4ce087b542","https://github.com/rails/rails/commit/cb16a3bb515b5d769f73926d9757270ace691f1d","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-54133.yml","https://security.netapp.com/advisory/ntap-20250306-0010","https://github.com/advisories/GHSA-vfm5-rmrh-j26v"],"source_kind":"github","identifiers":["GHSA-vfm5-rmrh-j26v","CVE-2024-54133"],"repository_url":"https://github.com/rails/rails","blast_radius":13.667850661693462,"created_at":"2024-12-10T23:07:40.935Z","updated_at":"2026-10-22T15:08:53.582Z","epss_percentage":0.01002,"epss_percentile":0.62508,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12Zm01LXJtcmgtajI2ds4ABCQK","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12Zm01LXJtcmgtajI2ds4ABCQK","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"8.0.0.1","vulnerable_version_range":"\u003e= 8.0.0, \u003c 8.0.0.1"},{"first_patched_version":"7.2.2.1","vulnerable_version_range":"\u003e= 7.2.0, \u003c 7.2.2.1"},{"first_patched_version":"7.1.5.1","vulnerable_version_range":"\u003e= 7.1.0, \u003c 7.1.5.1"},{"first_patched_version":"7.0.8.7","vulnerable_version_range":"\u003e= 5.2.0, \u003c 7.0.8.7"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12Zm01LXJtcmgtajI2ds4ABCQK/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12Zmc5LXIzZnEtanZ4NM4ABATd","url":"https://github.com/advisories/GHSA-vfg9-r3fq-jvx4","title":"Possible ReDoS vulnerability in HTTP Token authentication in Action Controller","description":"There is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. This vulnerability has been assigned the CVE identifier CVE-2024-47887.\n\nImpact\n------\n\nFor applications using HTTP Token authentication via `authenticate_or_request_with_http_token` or similar, a carefully crafted header may cause header parsing to take an unexpected amount of time, possibly resulting in a DoS vulnerability. All users running an affected release should either upgrade or apply the relevant patch immediately.\n\nRuby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 depends on Ruby 3.2 or greater so is unaffected.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nUsers on Ruby 3.2 are unaffected by this issue.\n\n\nCredits\n-------\nThanks to [scyoon](https://hackerone.com/scyoon) for reporting","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-10-15T23:35:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.6,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U","references":["https://github.com/rails/rails/security/advisories/GHSA-vfg9-r3fq-jvx4","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-47887.yml","https://github.com/advisories/GHSA-vfg9-r3fq-jvx4"],"source_kind":"github","identifiers":["GHSA-vfg9-r3fq-jvx4","CVE-2024-47887"],"repository_url":"https://github.com/rails/rails","blast_radius":39.22078885529429,"created_at":"2024-10-16T00:06:25.707Z","updated_at":"2026-10-24T21:07:51.864Z","epss_percentage":0.01041,"epss_percentile":0.63502,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12Zmc5LXIzZnEtanZ4NM4ABATd","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12Zmc5LXIzZnEtanZ4NM4ABATd","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"7.2.1.1","vulnerable_version_range":"\u003e= 7.2.0, \u003c 7.2.1.1"},{"first_patched_version":"7.1.4.1","vulnerable_version_range":"\u003e= 7.1.0, \u003c 7.1.4.1"},{"first_patched_version":"7.0.8.5","vulnerable_version_range":"\u003e= 7.0.0, \u003c 7.0.8.5"},{"first_patched_version":"6.1.7.9","vulnerable_version_range":"\u003e= 4.0.0, \u003c 6.1.7.9"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12Zmc5LXIzZnEtanZ4NM4ABATd/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14NzZ3LTZ2anItOHhnas4ABATe","url":"https://github.com/advisories/GHSA-x76w-6vjr-8xgj","title":"Possible ReDoS vulnerability in query parameter filtering in Action Dispatch","description":"There is a possible ReDoS vulnerability in the query parameter filtering routines of Action Dispatch. This vulnerability has been assigned the CVE identifier CVE-2024-41128.\n\nImpact\n------\n\nCarefully crafted query parameters can cause query parameter filtering to take an unexpected amount of time, possibly resulting in a DoS vulnerability. All users running an affected release should either upgrade or apply the relevant patch immediately.\n\nRuby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are unaffected. Rails 8.0.0.beta1 depends on Ruby 3.2 or greater so is unaffected.\n\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nUsers on Ruby 3.2 are unaffected by this issue.\n\n\nCredits\n-------\n\nThanks to [scyoon](https://hackerone.com/scyoon) for the report and patches!","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-10-15T23:35:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.6,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","references":["https://github.com/rails/rails/security/advisories/GHSA-x76w-6vjr-8xgj","https://nvd.nist.gov/vuln/detail/CVE-2024-41128","https://github.com/rails/rails/commit/27121e80f6dbb260f5a9f0452cd8411cb681f075","https://github.com/rails/rails/commit/b0fe99fa854ec8ff4498e75779b458392d1560ef","https://github.com/rails/rails/commit/b1241f468d1b32235f438c2e2203386e6efd3891","https://github.com/rails/rails/commit/fb493bebae1a9b83e494fe7edbf01f6167d606fd","https://access.redhat.com/security/cve/cve-2024-41128","https://bugzilla.redhat.com/show_bug.cgi?id=2319036","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-41128.yml","https://github.com/advisories/GHSA-x76w-6vjr-8xgj"],"source_kind":"github","identifiers":["GHSA-x76w-6vjr-8xgj","CVE-2024-41128"],"repository_url":"https://github.com/rails/rails","blast_radius":39.22078885529429,"created_at":"2024-10-16T00:06:21.249Z","updated_at":"2026-10-24T21:07:51.864Z","epss_percentage":0.01095,"epss_percentile":0.64508,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14NzZ3LTZ2anItOHhnas4ABATe","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14NzZ3LTZ2anItOHhnas4ABATe","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"7.2.1.1","vulnerable_version_range":"\u003e= 7.2.0, \u003c 7.2.1.1"},{"first_patched_version":"7.1.4.1","vulnerable_version_range":"\u003e= 7.1.0, \u003c 7.1.4.1"},{"first_patched_version":"7.0.8.5","vulnerable_version_range":"\u003e= 7.0.0, \u003c 7.0.8.5"},{"first_patched_version":"6.1.7.9","vulnerable_version_range":"\u003e= 3.1.0, \u003c 6.1.7.9"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14NzZ3LTZ2anItOHhnas4ABATe/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1md2hyLTg4cXgtaDlnN84AA8tD","url":"https://github.com/advisories/GHSA-fwhr-88qx-h9g7","title":"Missing security headers in Action Pack on non-HTML responses","description":"# Permissions-Policy is Only Served on HTML Content-Type\n\nThe application configurable Permissions-Policy is only served on responses\nwith an HTML related Content-Type.\n\nThis has been assigned the CVE identifier CVE-2024-28103.\n\n\nVersions Affected:  \u003e= 6.1.0\nNot affected:       \u003c 6.1.0\nFixed Versions:     6.1.7.8, 7.0.8.4, and 7.1.3.4\n\nImpact\n------\nResponses with a non-HTML Content-Type are not serving the configured Permissions-Policy. There are certain non-HTML Content-Types that would benefit from having the Permissions-Policy enforced.\n\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nN/A\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for\nthe supported release series in accordance with our \n[maintenance policy](https://guides.rubyonrails.org/maintenance_policy.html#security-issues)\nregarding security issues. They are in git-am format and consist of a\nsingle changeset.\n\n* 6-1-include-permissions-policy-header-on-non-html.patch - Patch for 6.1 series\n* 7-0-include-permissions-policy-header-on-non-html.patch - Patch for 7.0 series\n* 7-1-include-permissions-policy-header-on-non-html.patch - Patch for 7.1 series\n\n\n\nCredits\n-------\n\nThank you [shinkbr](https://hackerone.com/shinkbr) for reporting this!","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-06-04T22:26:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","references":["https://github.com/rails/rails/security/advisories/GHSA-fwhr-88qx-h9g7","https://nvd.nist.gov/vuln/detail/CVE-2024-28103","https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-28103.yml","https://security.netapp.com/advisory/ntap-20241206-0002","https://github.com/advisories/GHSA-fwhr-88qx-h9g7"],"source_kind":"github","identifiers":["GHSA-fwhr-88qx-h9g7","CVE-2024-28103"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2024-06-04T23:05:11.717Z","updated_at":"2026-10-29T08:10:24.047Z","epss_percentage":0.00658,"epss_percentile":0.50539,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1md2hyLTg4cXgtaDlnN84AA8tD","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1md2hyLTg4cXgtaDlnN84AA8tD","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"7.2.0.beta2","vulnerable_version_range":"= 7.2.0.beta1"},{"first_patched_version":"7.1.3.4","vulnerable_version_range":"\u003e= 7.1.0, \u003c 7.1.3.4"},{"first_patched_version":"7.0.8.4","vulnerable_version_range":"\u003e= 7.0.0, \u003c 7.0.8.4"},{"first_patched_version":"6.1.7.8","vulnerable_version_range":"\u003e= 6.1.0, \u003c 6.1.7.8"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1md2hyLTg4cXgtaDlnN84AA8tD/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05ODIyLTZtOTMteHFmNM4AA5jO","url":"https://github.com/advisories/GHSA-9822-6m93-xqf4","title":"Rails has possible XSS Vulnerability in Action Controller","description":"# Possible XSS Vulnerability in Action Controller\n\nThere is a possible XSS vulnerability when using the translation helpers\n(`translate`, `t`, etc) in Action Controller. This vulnerability has been\nassigned the CVE identifier CVE-2024-26143.\n\nVersions Affected:  \u003e= 7.0.0.\nNot affected:       \u003c 7.0.0\nFixed Versions:     7.1.3.1, 7.0.8.1\n\nImpact\n------\nApplications using translation methods like `translate`, or `t` on a\ncontroller, with a key ending in \"_html\", a `:default` key which contains\nuntrusted user input, and the resulting string is used in a view, may be\nsusceptible to an XSS vulnerability.\n\nFor example, impacted code will look something like this:\n\n```ruby\nclass ArticlesController \u003c ApplicationController\n  def show  \n    @message = t(\"message_html\", default: untrusted_input)\n    # The `show` template displays the contents of `@message`\n  end\nend\n```\n\nTo reiterate the pre-conditions, applications must:\n\n* Use a translation function from a controller (i.e. _not_ I18n.t, or `t` from\n  a view)\n* Use a key that ends in `_html`\n* Use a default value where the default value is untrusted and unescaped input\n* Send the text to the victim (whether that's part of a template, or a\n  `render` call)\n\nAll users running an affected release should either upgrade or use one of the\nworkarounds immediately.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nThere are no feasible workarounds for this issue.\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for\nthe two supported release series. They are in git-am format and consist of a\nsingle changeset.\n\n*  7-0-translate-xss.patch - Patch for 7.0 series\n*  7-1-translate-xss.patch - Patch for 7.1 series\n\nCredits\n-------\n\nThanks to [ooooooo_q](https://hackerone.com/ooooooo_q) for the patch and fix!","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-02-27T21:41:12.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/rails/rails/security/advisories/GHSA-9822-6m93-xqf4","https://nvd.nist.gov/vuln/detail/CVE-2024-26143","https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc","https://github.com/rails/rails/commit/5187a9ef51980ad1b8e81945ebe0462d28f84f9e","https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26143.yml","https://security.netapp.com/advisory/ntap-20240510-0004","https://github.com/advisories/GHSA-9822-6m93-xqf4"],"source_kind":"github","identifiers":["GHSA-9822-6m93-xqf4","CVE-2024-26143"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2024-02-27T22:04:48.333Z","updated_at":"2026-10-29T08:11:34.869Z","epss_percentage":0.01034,"epss_percentile":0.63533,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05ODIyLTZtOTMteHFmNM4AA5jO","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05ODIyLTZtOTMteHFmNM4AA5jO","packages":[{"ecosystem":"rubygems","package_name":"rails","versions":[{"first_patched_version":"7.1.3.1","vulnerable_version_range":"\u003e= 7.1.0, \u003c 7.1.3.1"},{"first_patched_version":"7.0.8.1","vulnerable_version_range":"\u003e= 7.0.0, \u003c 7.0.8.1"}],"purl":"pkg:gem/rails"},{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"7.1.3.1","vulnerable_version_range":"\u003e= 7.1.0, \u003c 7.1.3.1"},{"first_patched_version":"7.0.8.1","vulnerable_version_range":"\u003e= 7.0.0, \u003c 7.0.8.1"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05ODIyLTZtOTMteHFmNM4AA5jO/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qamh4LWpodnAtNzR3cc4AA5jN","url":"https://github.com/advisories/GHSA-jjhx-jhvp-74wq","title":"Rails has possible ReDoS vulnerability in Accept header parsing in Action Dispatch","description":"# Possible ReDoS vulnerability in Accept header parsing in Action Dispatch\n\nThere is a possible ReDoS vulnerability in the Accept header parsing routines\nof Action Dispatch. This vulnerability has been assigned the CVE identifier\nCVE-2024-26142.\n\nVersions Affected:  \u003e= 7.1.0, \u003c 7.1.3.1\nNot affected:       \u003c 7.1.0\nFixed Versions:     7.1.3.1\n\nImpact\n------\nCarefully crafted Accept headers can cause Accept header parsing in Action\nDispatch to take an unexpected amount of time, possibly resulting in a DoS\nvulnerability.  All users running an affected release should either upgrade or\nuse one of the workarounds immediately.\n\nRuby 3.2 has mitigations for this problem, so Rails applications using Ruby\n3.2 or newer are unaffected.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nThere are no feasible workarounds for this issue.\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for\nthe two supported release series. They are in git-am format and consist of a\nsingle changeset.\n\n* 7-1-accept-redox.patch - Patch for 7.1 series\n\nCredits\n-------\nThanks [svalkanov](https://hackerone.com/svalkanov) for the report and patch!","origin":"UNSPECIFIED","severity":"LOW","published_at":"2024-02-27T21:41:09.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/rails/rails/security/advisories/GHSA-jjhx-jhvp-74wq","https://nvd.nist.gov/vuln/detail/CVE-2024-26142","https://github.com/rails/rails/commit/b4d3bfb5ed8a5b5a90aad3a3b28860c7a931e272","https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2024-26142.yml","https://github.com/advisories/GHSA-jjhx-jhvp-74wq"],"source_kind":"github","identifiers":["GHSA-jjhx-jhvp-74wq","CVE-2024-26142"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2024-02-27T22:04:48.353Z","updated_at":"2026-10-12T12:15:43.829Z","epss_percentage":0.01498,"epss_percentile":0.73501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qamh4LWpodnAtNzR3cc4AA5jN","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qamh4LWpodnAtNzR3cc4AA5jN","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"7.1.3.1","vulnerable_version_range":"\u003e= 7.1.0, \u003c 7.1.3.1"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qamh4LWpodnAtNzR3cc4AA5jN/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00Zzh2LXZnNDMtd3BnZs4AA0Io","url":"https://github.com/advisories/GHSA-4g8v-vg43-wpgf","title":"Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to","description":"The `redirect_to` method in Rails allows provided values to contain characters which are not legal in an HTTP header value. This results in the potential for downstream services which enforce RFC compliance on HTTP response headers to remove the assigned Location header. This vulnerability has been assigned the CVE identifier CVE-2023-28362.\n\nVersions Affected: All. Not affected: None Fixed Versions: 7.0.5.1, 6.1.7.4\n\n# Impact\n\nThis introduces the potential for a Cross-site-scripting (XSS) payload to be delivered on the now static redirection page. Note that this both requires user interaction and for a Rails app to be configured to allow redirects to external hosts (defaults to false in Rails \u003e= 7.0.x).\n\n# Releases\n\nThe FIXED releases are available at the normal locations.\n\n# Workarounds\n\nAvoid providing user supplied URLs with arbitrary schemes to the `redirect_to` method.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-06-29T15:03:16.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.0,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","references":["https://github.com/rails/rails/commit/1c3f93d1e90a3475f9ae2377ead25ccf11f71441","https://github.com/rails/rails/commit/c9ab9b32bcdcfd8bcd55907f6c7b20b4e004cc23","https://discuss.rubyonrails.org/t/cve-2023-28362-possible-xss-via-user-supplied-values-to-redirect-to/83132","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-28362.yml","https://nvd.nist.gov/vuln/detail/CVE-2023-28362","https://github.com/rails/rails/commit/69e37c84e3f77d75566424c7d0015172d6a6fac5","https://security.netapp.com/advisory/ntap-20250502-0009","https://github.com/advisories/GHSA-4g8v-vg43-wpgf"],"source_kind":"github","identifiers":["GHSA-4g8v-vg43-wpgf","CVE-2023-28362"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2023-06-29T16:03:50.179Z","updated_at":"2026-10-29T08:14:34.595Z","epss_percentage":0.00333,"epss_percentile":0.26251,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00Zzh2LXZnNDMtd3BnZs4AA0Io","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00Zzh2LXZnNDMtd3BnZs4AA0Io","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"7.0.5.1","vulnerable_version_range":"\u003e= 7.0.0, \u003c 7.0.5.1"},{"first_patched_version":"6.1.7.4","vulnerable_version_range":"\u003c 6.1.7.4"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7.1","6.1.7.2","6.1.7.3","7.0.0","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3"],"unaffected_versions":["6.1.7","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00Zzh2LXZnNDMtd3BnZs4AA0Io/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wODR2LTQ1eGotd3dxas4AAxDz","url":"https://github.com/advisories/GHSA-p84v-45xj-wwqj","title":"ReDoS based DoS vulnerability in Action Dispatch","description":"There is a possible regular expression based DoS vulnerability in Action Dispatch. This vulnerability has been assigned the CVE identifier CVE-2023-22792.\n\nVersions Affected: \u003e= 3.0.0 Not affected: \u003c 3.0.0 Fixed Versions: 5.2.8.15 (Rails LTS), 6.1.7.1, 7.0.4.1\nImpact\n\nSpecially crafted cookies, in combination with a specially crafted X_FORWARDED_HOST header can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.\nReleases\n\nThe FIXED releases are available at the normal locations.\nWorkarounds\n\nWe recommend that all users upgrade to one of the FIXED versions. In the meantime, users can mitigate this vulnerability by using a load balancer or other device to filter out malicious X_FORWARDED_HOST headers before they reach the application.\nPatches\n\nTo aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n    6-1-Use-string-split-instead-of-regex-for-domain-parts.patch - Patch for 6.1 series\n    7-0-Use-string-split-instead-of-regex-for-domain-parts.patch - Patch for 7.0 series\n\nPlease note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n\nhttps://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released","origin":"UNSPECIFIED","severity":"LOW","published_at":"2023-01-18T18:23:34.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/rails/rails/releases/tag/v7.0.4.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22792.yml","https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released","https://nvd.nist.gov/vuln/detail/CVE-2023-22792","https://discuss.rubyonrails.org/t/cve-2023-22792-possible-redos-based-dos-vulnerability-in-action-dispatch/82115","https://www.debian.org/security/2023/dsa-5372","https://security.netapp.com/advisory/ntap-20240202-0007","https://github.com/advisories/GHSA-p84v-45xj-wwqj"],"source_kind":"github","identifiers":["GHSA-p84v-45xj-wwqj","CVE-2023-22792"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2023-01-18T19:03:22.052Z","updated_at":"2026-10-26T21:11:36.755Z","epss_percentage":0.01695,"epss_percentile":0.76507,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wODR2LTQ1eGotd3dxas4AAxDz","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wODR2LTQ1eGotd3dxas4AAxDz","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.1.7.1","vulnerable_version_range":"\u003e= 6.0.0, \u003c 6.1.7.1"},{"first_patched_version":"7.0.4.1","vulnerable_version_range":"\u003e= 7.0.0, \u003c 7.0.4.1"},{"first_patched_version":"5.2.8.15","vulnerable_version_range":"\u003e= 3.0.0, \u003c 5.2.8.15"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wODR2LTQ1eGotd3dxas4AAxDz/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05NDQ1LTRjcjYtMzM2cs4AAxDx","url":"https://github.com/advisories/GHSA-9445-4cr6-336r","title":"Open Redirect Vulnerability in Action Pack","description":"There is a vulnerability in Action Controller’s redirect_to. This vulnerability has been assigned the CVE identifier CVE-2023-22797.\n\nVersions Affected: \u003e= 7.0.0 Not affected: \u003c 7.0.0 Fixed Versions: 7.0.4.1\nImpact \n\nThere is a possible open redirect when using the redirect_to helper with untrusted user input.\n\nVulnerable code will look like this:\n```\nredirect_to(params[:some_param])\n```\n\nRails 7.0 introduced protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could be bypassed by a carefully crafted URL.\n\nAll users running an affected release should either upgrade or use one of the workarounds immediately.\nReleases\n\nThe FIXED releases are available at the normal locations.\nWorkarounds\n\nThere are no feasible workarounds for this issue.\nPatches\n\nTo aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n    7-0-Fix-sec-issue-with-_url_host_allowed.patch - Patch for 7.0 series\n\nPlease note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-01-18T18:21:23.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/rails/rails/releases/tag/v7.0.4.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22797.yml","https://nvd.nist.gov/vuln/detail/CVE-2023-22797","https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127","https://github.com/advisories/GHSA-9445-4cr6-336r"],"source_kind":"github","identifiers":["GHSA-9445-4cr6-336r","CVE-2023-22797"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2023-01-18T19:03:22.074Z","updated_at":"2026-10-29T08:15:22.233Z","epss_percentage":0.00595,"epss_percentile":0.4772,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NDQ1LTRjcjYtMzM2cs4AAxDx","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05NDQ1LTRjcjYtMzM2cs4AAxDx","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"7.0.4.1","vulnerable_version_range":"\u003e= 7.0.0, \u003c 7.0.4.1"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["7.0.0","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NDQ1LTRjcjYtMzM2cs4AAxDx/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04eHd3LXgzZzMtNmpjds4AAxDv","url":"https://github.com/advisories/GHSA-8xww-x3g3-6jcv","title":"ReDoS based DoS vulnerability in Action Dispatch","description":"There is a possible regular expression based DoS vulnerability in Action Dispatch related to the If-None-Match header. This vulnerability has been assigned the CVE identifier CVE-2023-22795.\n\nVersions Affected: All Not affected: None Fixed Versions: 5.2.8.15 (Rails LTS), 6.1.7.1, 7.0.4.1\n\nImpact\n\nA specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.\nReleases\n\nThe FIXED releases are available at the normal locations.\nWorkarounds\n\nWe recommend that all users upgrade to one of the FIXED versions. In the meantime, users can mitigate this vulnerability by using a load balancer or other device to filter out malicious If-None-Match headers before they reach the application.\n\nUsers on Ruby 3.2.0 or greater are not affected by this vulnerability.\nPatches\n\nTo aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n    6-1-Avoid-regex-backtracking-on-If-None-Match-header.patch - Patch for 6.1 series\n    7-0-Avoid-regex-backtracking-on-If-None-Match-header.patch - Patch for 7.0 series\n\nPlease note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2023-01-18T18:20:51.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/rails/rails/releases/tag/v7.0.4.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-22795.yml","https://rubyonrails.org/2023/1/17/Rails-Versions-6-0-6-1-6-1-7-1-7-0-4-1-have-been-released","https://nvd.nist.gov/vuln/detail/CVE-2023-22795","https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118","https://github.com/rails/rails/commit/8d82687f3b04b2803320b64f985308239a8c3d2f","https://github.com/rails/rails/commit/8dc45950619a4c64d16fb9370570c996d201f9b0","https://github.com/rails/rails/commit/cd461c3e64e09cdcb1e379d1c35423c5e2caa592","https://github.com/rails/rails/releases/tag/v6.1.7.1","https://github.com/advisories/GHSA-8xww-x3g3-6jcv"],"source_kind":"github","identifiers":["GHSA-8xww-x3g3-6jcv","CVE-2023-22795"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2023-01-18T19:03:22.095Z","updated_at":"2026-10-29T08:15:22.234Z","epss_percentage":0.02278,"epss_percentile":0.82502,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04eHd3LXgzZzMtNmpjds4AAxDv","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04eHd3LXgzZzMtNmpjds4AAxDv","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.1.7.1","vulnerable_version_range":"\u003e= 4.0.0.beta1, \u003c 6.1.7.1"},{"first_patched_version":"7.0.4.1","vulnerable_version_range":"\u003e= 7.0.0, \u003c 7.0.4.1"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","7.0.0","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04eHd3LXgzZzMtNmpjds4AAxDv/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05Y2hyLTRmamgtNXJnd84AAvjh","url":"https://github.com/advisories/GHSA-9chr-4fjh-5rgw","title":"Cross-site Scripting in actionpack","description":"actionpack from the Ruby on Rails project is vulnerable to Cross-site Scripting in the Route Error Page. This issue has been patched with this [commit](https://github.com/rails/rails/commit/be177e4566747b73ff63fd5f529fab564e475ed4). \n\nThis vulnerability is disputed by the Rails security team. It requires that the developer is tricked into copy pasting a malicious javascript-containing string into a development-only error page accessible only via localhost.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2022-10-27T12:00:27.000Z","withdrawn_at":"2023-01-23T20:44:50.000Z","classification":"GENERAL","cvss_score":3.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-3704","https://github.com/rails/rails/commit/be177e4566747b73ff63fd5f529fab564e475ed4","https://vuldb.com/?id.212319","https://github.com/rails/rails/pull/46269","https://github.com/rails/rails/issues/46244#issuecomment-1380875153","https://github.com/rails/rails/issues/46244","https://github.com/advisories/GHSA-9chr-4fjh-5rgw"],"source_kind":"github","identifiers":["GHSA-9chr-4fjh-5rgw","CVE-2022-3704"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:11:54.329Z","updated_at":"2026-10-29T08:15:45.948Z","epss_percentage":0.00904,"epss_percentile":0.59532,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05Y2hyLTRmamgtNXJnd84AAvjh","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05Y2hyLTRmamgtNXJnd84AAvjh","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 7.0.4"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3"],"unaffected_versions":["7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05Y2hyLTRmamgtNXJnd84AAvjh/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tbTMzLTV2ZnEtM21tM81BUA","url":"https://github.com/advisories/GHSA-mm33-5vfq-3mm3","title":"Cross-site Scripting Vulnerability in Action Pack","description":"There is a possible XSS vulnerability in Rails / Action Pack. This vulnerability has been\nassigned the CVE identifier CVE-2022-22577.\n\nVersions Affected:  \u003e= 5.2.0\nNot affected:       \u003c 5.2.0\nFixed Versions:     7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1\n\n## Impact\n\nCSP headers were only sent along with responses that Rails considered as\n\"HTML\" responses.  This left API requests without CSP headers, which could\npossibly expose users to XSS attacks.\n\n## Releases\n\nThe FIXED releases are available at the normal locations.\n\n## Workarounds\n\nSet a CSP for your API responses manually.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-04-27T22:28:59.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-22577","https://github.com/rails/rails/pull/44635","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2022-22577.yml","https://groups.google.com/g/ruby-security-ann/c/NuFRKaN5swI","https://rubyonrails.org/2022/4/26/Rails-7-0-2-4-6-1-5-1-6-0-4-8-and-5-2-7-1-have-been-released","https://discuss.rubyonrails.org/t/cve-2022-22577-possible-xss-vulnerability-in-action-pack/80533","https://lists.debian.org/debian-lts-announce/2022/09/msg00002.html","https://security.netapp.com/advisory/ntap-20221118-0002/","https://github.com/rails/rails/commit/2b820a2a69fa50cffa74b4aedc57bf92ed6910ec","https://github.com/rails/rails/commit/5299b57d596ea274f77f5ffee2b79c6ee0255508","https://github.com/rails/rails/commit/8198d7c4accad0b6ba956b9d59528534a289866b","https://github.com/rails/rails/commit/d2253115ac2b30f5f7210670af906cebf79cf809","https://www.debian.org/security/2023/dsa-5372","https://github.com/advisories/GHSA-mm33-5vfq-3mm3"],"source_kind":"github","identifiers":["GHSA-mm33-5vfq-3mm3","CVE-2022-22577"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:12:29.617Z","updated_at":"2026-10-18T20:25:19.041Z","epss_percentage":0.01759,"epss_percentile":0.77526,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tbTMzLTV2ZnEtM21tM81BUA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tbTMzLTV2ZnEtM21tM81BUA","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"7.0.2.4","vulnerable_version_range":"\u003e= 7.0.0, \u003c= 7.0.2.3"},{"first_patched_version":"6.1.5.1","vulnerable_version_range":"\u003e= 6.1.0, \u003c= 6.1.5.0"},{"first_patched_version":"6.0.4.8","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.4.7"},{"first_patched_version":"5.2.7.1","vulnerable_version_range":"\u003e= 5.2.0, \u003c= 5.2.7.0"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tbTMzLTV2ZnEtM21tM81BUA/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xNThqLWZtdmYtOXJxNs0_jg","url":"https://github.com/advisories/GHSA-q58j-fmvf-9rq6","title":"Cross site scripting in actionpack Rubygem","description":"A cross-site scripting vulnerability flaw was found in the `auto_link` function in Rails before version 3.0.6.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-04-22T00:24:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2011-1497","https://github.com/rails/rails/blob/38df020c95beca7e12f0188cb7e18f3c37789e20/actionpack/CHANGELOG","https://www.openwall.com/lists/oss-security/2011/04/06/13","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-1497.yml","https://github.com/rails/rails/commit/61ee3449674c591747db95f9b3472c5c3bd9e84d","https://github.com/rails/rails/commit/ab764ecbfea31a3b14323283287e2fc80955ace6","https://github.com/advisories/GHSA-q58j-fmvf-9rq6"],"source_kind":"github","identifiers":["GHSA-q58j-fmvf-9rq6","CVE-2011-1497"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:12:18.648Z","updated_at":"2026-10-16T06:08:01.311Z","epss_percentage":0.01285,"epss_percentile":0.69557,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xNThqLWZtdmYtOXJxNs0_jg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xNThqLWZtdmYtOXJxNs0_jg","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.0.6","vulnerable_version_range":"\u003e= 3.0.0.rc, \u003c 3.0.6"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xNThqLWZtdmYtOXJxNs0_jg/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13aDk4LXAyOHItdnJjOc0rDg","url":"https://github.com/advisories/GHSA-wh98-p28r-vrc9","title":"Exposure of information in Action Pack","description":"### Impact\n\nUnder certain circumstances response bodies will not be closed, for example a [bug in a webserver](https://github.com/puma/puma/pull/2812) or a bug in a Rack middleware.  In the event a response is *not* notified of a `close`, `ActionDispatch::Executor` will not know to reset thread local state for the next request.  This can lead to data being leaked to subsequent requests, especially when interacting with `ActiveSupport::CurrentAttributes`.\n\nUpgrading to the FIXED versions of Rails will ensure mitigation of this issue even in the context of a buggy webserver or middleware implementation.\n\n### Patches\n\nThis has been fixed in Rails 7.0.2.2, 6.1.4.6, 6.0.4.6, and 5.2.6.2.\n\n### Workarounds\n\nUpgrading is highly recommended, but to work around this problem the following middleware can be used:\n\n```ruby\nclass GuardedExecutor \u003c ActionDispatch::Executor\n  def call(env)\n    ensure_completed!\n    super\n  end\n\n  private\n\n    def ensure_completed!\n      @executor.new.complete! if @executor.active?\n    end\nend\n\n# Ensure the guard is inserted before ActionDispatch::Executor\nRails.application.configure do\n  config.middleware.swap ActionDispatch::Executor, GuardedExecutor, executor\nend\n```","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-02-11T20:49:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.4,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","references":["https://github.com/rails/rails/security/advisories/GHSA-wh98-p28r-vrc9","https://github.com/rails/rails/commit/f9a2ad03943d5c2ba54e1d45f155442b519c75da","https://discuss.rubyonrails.org/t/cve-2022-23633-possible-exposure-of-information-vulnerability-in-action-pack/80016","https://rubyonrails.org/2022/2/11/Rails-7-0-2-2-6-1-4-6-6-0-4-6-and-5-2-6-2-have-been-released","https://nvd.nist.gov/vuln/detail/CVE-2022-23633","http://www.openwall.com/lists/oss-security/2022/02/11/5","https://lists.debian.org/debian-lts-announce/2022/09/msg00002.html","https://www.debian.org/security/2023/dsa-5372","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2022-23633.yml","https://groups.google.com/g/ruby-security-ann/c/FkTM-_7zSNA/m/K2RiMJBlBAAJ","https://security.netapp.com/advisory/ntap-20240119-0013/","https://github.com/advisories/GHSA-wh98-p28r-vrc9"],"source_kind":"github","identifiers":["GHSA-wh98-p28r-vrc9","CVE-2022-23633"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:12:35.965Z","updated_at":"2026-10-29T08:16:52.905Z","epss_percentage":0.02217,"epss_percentile":0.82512,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13aDk4LXAyOHItdnJjOc0rDg","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13aDk4LXAyOHItdnJjOc0rDg","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"7.0.2.2","vulnerable_version_range":"\u003e= 7.0.0.0, \u003c= 7.0.2.1"},{"first_patched_version":"6.1.4.6","vulnerable_version_range":"\u003e= 6.1.0.0, \u003c= 6.1.4.5"},{"first_patched_version":"6.0.4.6","vulnerable_version_range":"\u003e= 6.0.0.0, \u003c= 6.0.4.5"},{"first_patched_version":"5.2.6.2","vulnerable_version_range":"\u003e= 5.0.0.0, \u003c= 5.2.6.1"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.2.6","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.4","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.4","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.2","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13aDk4LXAyOHItdnJjOc0rDg/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xcGhjLWhmNXEtdjhmY80bRw","url":"https://github.com/advisories/GHSA-qphc-hf5q-v8fc","title":"actionpack Open Redirect in Host Authorization Middleware","description":"Specially crafted \"X-Forwarded-Host\" headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.\n\nImpacted applications will have allowed hosts with a leading dot. For example, configuration files that look like this:\n\n```\nconfig.hosts \u003c\u003c  '.EXAMPLE.com'\n```\n\nWhen an allowed host contains a leading dot, a specially crafted Host header can be used to redirect to a malicious website.\n\nThis vulnerability is similar to CVE-2021-22881 and CVE-2021-22942.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 6-0-host-authorzation-open-redirect.patch - Patch for 6.0 series\n* 6-1-host-authorzation-open-redirect.patch - Patch for 6.1 series\n* 7-0-host-authorzation-open-redirect.patch - Patch for 7.0 series\n\nPlease note that only the 6.1.Z, 6.0.Z, and 5.2.Z series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-12-14T21:19:08.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-44528","https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ?utm_medium=email\u0026utm_source=footer","https://github.com/rails/rails/commit/aecba3c301b80e9d5a63c30ea1b287bceaf2c107","https://github.com/rails/rails/blob/v6.1.4.2/actionpack/CHANGELOG.md#rails-6142-december-14-2021","https://github.com/rails/rails/commit/0fccfb9a3097a9c4260c791f1a40b128517e7815","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-44528.yml","https://groups.google.com/g/ruby-security-ann/c/vG9gz3nk1pM/m/7-NU4MNrDAAJ","https://www.debian.org/security/2023/dsa-5372","https://security.netapp.com/advisory/ntap-20240208-0003/","https://github.com/advisories/GHSA-qphc-hf5q-v8fc"],"source_kind":"github","identifiers":["GHSA-qphc-hf5q-v8fc","CVE-2021-44528"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:12:40.601Z","updated_at":"2026-10-08T07:59:55.670Z","epss_percentage":0.04182,"epss_percentile":0.90539,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcGhjLWhmNXEtdjhmY80bRw","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xcGhjLWhmNXEtdjhmY80bRw","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.1.4.2","vulnerable_version_range":"\u003e= 6.1.0, \u003c= 6.1.4.1"},{"first_patched_version":"6.0.4.2","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.4.1"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcGhjLWhmNXEtdjhmY80bRw/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJycXctdjI2NS1qZjhj","url":"https://github.com/advisories/GHSA-2rqw-v265-jf8c","title":"Open Redirect in ActionPack","description":"# Overview\n\nThere is a possible open redirect vulnerability in the Host Authorization middleware in Action Pack. This vulnerability has been assigned the CVE identifier CVE-2021-22942.\n\nVersions Affected: \u003e= 6.0.0.\nNot affected: \u003c 6.0.0\nFixed Versions: 6.1.4.1, 6.0.4.1\n\n# Impact\n\nSpecially crafted “X-Forwarded-Host” headers in combination with certain “allowed host” formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website.\n\nImpacted applications will have allowed hosts with a leading dot. For example, configuration files that look like this:\n\n```ruby\nconfig.hosts \u003c\u003c  '.EXAMPLE.com'\n```\n\nWhen an allowed host contains a leading dot, a specially crafted Host header can be used to redirect to a malicious website.\n\nThis vulnerability is similar to CVE-2021-22881, but CVE-2021-22881 did not take in to account domain name case sensitivity.\n\n# Releases\n\nThe fixed releases are available at the normal locations.\n\n# Workarounds\n\nIn the case a patch can’t be applied, the following monkey patch can be used in an initializer:\n\n```ruby\nmodule ActionDispatch\n  class HostAuthorization\n    HOSTNAME = /[a-z0-9.-]+|\\[[a-f0-9]*:[a-f0-9.:]+\\]/i\n    VALID_ORIGIN_HOST = /\\A(#{HOSTNAME})(?::\\d+)?\\z/\n    VALID_FORWARDED_HOST = /(?:\\A|,[ ]?)(#{HOSTNAME})(?::\\d+)?\\z/\n\n    private\n      def authorized?(request)\n        origin_host =\n          request.get_header(\"HTTP_HOST\")\u0026.slice(VALID_ORIGIN_HOST, 1) || \"\"\n        forwarded_host =\n          request.x_forwarded_host\u0026.slice(VALID_FORWARDED_HOST, 1) || \"\"\n        @permissions.allows?(origin_host) \u0026\u0026\n          (forwarded_host.blank? || @permissions.allows?(forwarded_host))\n      end\n  end\nend\n```\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-08-26T20:36:51.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-22942","https://access.redhat.com/security/cve/cve-2021-22942","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22942.yml","https://groups.google.com/g/rubyonrails-security/c/wB5tRn7h36c","https://rubygems.org/gems/actionpack","https://weblog.rubyonrails.org/2021/8/19/Rails-6-0-4-1-and-6-1-4-1-have-been-released/","http://www.openwall.com/lists/oss-security/2021/12/14/5","https://www.debian.org/security/2023/dsa-5372","https://security.netapp.com/advisory/ntap-20240202-0005/","https://github.com/advisories/GHSA-2rqw-v265-jf8c"],"source_kind":"github","identifiers":["GHSA-2rqw-v265-jf8c","CVE-2021-22942"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:12:48.706Z","updated_at":"2026-10-16T06:10:58.568Z","epss_percentage":0.01695,"epss_percentile":0.76506,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJycXctdjI2NS1qZjhj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJycXctdjI2NS1qZjhj","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.1.4.1","vulnerable_version_range":"\u003e= 6.1.0, \u003c= 6.1.4"},{"first_patched_version":"6.0.4.1","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.4"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJycXctdjI2NS1qZjhj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3angtM2c3ai04NTg0","url":"https://github.com/advisories/GHSA-7wjx-3g7j-8584","title":"Possible DoS Vulnerability in Action Controller Token Authentication","description":"There is a possible DoS vulnerability in the Token Authentication logic in Action Controller.\n\nVersions Affected:  \u003e= 4.0.0\nNot affected:       \u003c 4.0.0\nFixed Versions:     6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6\n\nImpact\n------\nImpacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.  Impacted code will look something like this:\n\n```\nclass PostsController \u003c ApplicationController\n  before_action :authenticate\n\n  private\n\n  def authenticate\n    authenticate_or_request_with_http_token do |token, options|\n      # ...\n    end\n  end\nend\n```\n\nAll users running an affected release should either upgrade or use one of the workarounds immediately.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nThe following monkey patch placed in an initializer can be used to work around the issue:\n\n```ruby\nmodule ActionController::HttpAuthentication::Token\n  AUTHN_PAIR_DELIMITERS = /(?:,|;|\\t)/\nend\n```\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 5-2-http-authentication-dos.patch - Patch for 5.2 series\n* 6-0-http-authentication-dos.patch - Patch for 6.0 series\n* 6-1-http-authentication-dos.patch - Patch for 6.1 series\n\nPlease note that only the 6.1.Z, 6.0.Z, and 5.2.Z series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n\nCredits\n-------\nThank you to https://hackerone.com/wonda_tea_coffee for reporting this issue!","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-05-05T19:49:12.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/rails/rails/releases/tag/v5.2.4.6","https://github.com/rails/rails/releases/tag/v5.2.6","https://github.com/rails/rails/releases/tag/v6.0.3.7","https://github.com/rails/rails/releases/tag/v6.1.3.2","https://groups.google.com/g/rubyonrails-security/c/Pf1TjkOBdyQ","https://nvd.nist.gov/vuln/detail/CVE-2021-22904","https://hackerone.com/reports/1101125","https://discuss.rubyonrails.org/t/cve-2021-22904-possible-dos-vulnerability-in-action-controller-token-authentication/77869","https://security.netapp.com/advisory/ntap-20210805-0009/","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22904.yml","https://github.com/advisories/GHSA-7wjx-3g7j-8584"],"source_kind":"github","identifiers":["GHSA-7wjx-3g7j-8584","CVE-2021-22904"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:12:43.978Z","updated_at":"2026-10-29T08:14:13.106Z","epss_percentage":0.04868,"epss_percentile":0.91786,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3angtM2c3ai04NTg0","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3angtM2c3ai04NTg0","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"5.2.4.6","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 5.2.4.5"},{"first_patched_version":"5.2.6","vulnerable_version_range":"\u003e= 5.2.5, \u003c 5.2.6"},{"first_patched_version":"6.1.3.2","vulnerable_version_range":"\u003e= 6.1.0, \u003c= 6.1.3.1"},{"first_patched_version":"6.0.3.7","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.3.6"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.5","5.2.6.1","5.2.6.2","5.2.6.3","6.0.0","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.1.0","6.1.1","6.1.2","6.1.2.1","6.1.3.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","5.2.4","5.2.4.6","5.2.4.rc1","5.2.6","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.3","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0.rc1","6.1.0.rc2","6.1.3","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTd3angtM2c3ai04NTg0/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqZzQtOHE1Zi14NmZt","url":"https://github.com/advisories/GHSA-hjg4-8q5f-x6fm","title":"Action Pack contains Information Disclosure / Unintended Method Execution vulnerability","description":"Impact\n------\nThere is a possible information disclosure / unintended method execution vulnerability in Action Pack when using the `redirect_to` or `polymorphic_url` helper with untrusted user input.\n\nVulnerable code will look like this.\n\n```\nredirect_to(params[:some_param])\n```\n\nAll users running an affected release should either upgrade or use one of the workarounds immediately.\n\nReleases\n--------\nThe FIXED releases are available at the normal locations.\n\nWorkarounds\n-----------\nTo work around this problem, it is recommended to use an allow list for valid parameters passed from the user.  For example,\n\n```ruby\nprivate def check(param)\n  case param\n  when \"valid\"\n    param\n  else\n    \"/\"\n  end\nend\n\ndef index\n  redirect_to(check(params[:some_param]))\nend\n```\n\nOr force the user input to be cast to a string like this,\n\n```ruby\ndef index\n  redirect_to(params[:some_param].to_s)\nend\n```\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 5-2-information-disclosure.patch - Patch for 5.2 series\n* 6-0-information-disclosure.patch - Patch for 6.0 series\n* 6-1-information-disclosure.patch - Patch for 6.1 series\n\nPlease note that only the 5.2, 6.0, and 6.1 series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n\nCredits\n-------\n\nThanks to Benoit Côté-Jodoin from Shopify for reporting this.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-05-05T19:49:02.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://groups.google.com/g/rubyonrails-security/c/NiQl-48cXYI","https://nvd.nist.gov/vuln/detail/CVE-2021-22885","https://hackerone.com/reports/1106652","https://security.netapp.com/advisory/ntap-20210805-0009/","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22885.yml","https://github.com/advisories/GHSA-hjg4-8q5f-x6fm"],"source_kind":"github","identifiers":["GHSA-hjg4-8q5f-x6fm","CVE-2021-22885"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:05.223Z","updated_at":"2026-10-29T08:17:57.333Z","epss_percentage":0.04082,"epss_percentile":0.90548,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqZzQtOHE1Zi14NmZt","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqZzQtOHE1Zi14NmZt","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"5.2.4.6","vulnerable_version_range":"\u003e= 2.0.0, \u003c= 5.2.4.5"},{"first_patched_version":"5.2.6","vulnerable_version_range":"\u003e= 5.2.5, \u003c 5.2.6"},{"first_patched_version":"6.1.3.2","vulnerable_version_range":"\u003e= 6.1.0, \u003c= 6.1.3.1"},{"first_patched_version":"6.0.3.7","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.3.6"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.5","5.2.6.1","5.2.6.2","5.2.6.3","6.0.0","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.1.0","6.1.1","6.1.2","6.1.2.1","6.1.3.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","5.2.4","5.2.4.6","5.2.4.rc1","5.2.6","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.3","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0.rc1","6.1.0.rc2","6.1.3","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhqZzQtOHE1Zi14NmZt/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVocTIteGY4OS05anhx","url":"https://github.com/advisories/GHSA-5hq2-xf89-9jxq","title":"Possible Open Redirect Vulnerability in Action Pack","description":"There is a possible Open Redirect Vulnerability in Action Pack.\n\nVersions Affected:  \u003e= v6.1.0.rc2\nNot affected:       \u003c v6.1.0.rc2\nFixed Versions:     6.1.3.2\n\nImpact\n------\nThis is similar to CVE-2021-22881. Specially crafted Host headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious\nwebsite.\n\nSince rails/rails@9bc7ea5, strings in config.hosts that do not have a leading dot are converted to regular expressions without proper escaping. This causes, for example, config.hosts \u003c\u003c \"sub.example.com\" to permit a request with a Host header value of sub-example.com.\n\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nThe following monkey patch put in an initializer can be used as a workaround.\n\n```ruby\nclass ActionDispatch::HostAuthorization::Permissions\n  def sanitize_string(host)\n    if host.start_with?(\".\")\n      /\\A(.+\\.)?#{Regexp.escape(host[1..-1])}\\z/i\n    else\n      /\\A#{Regexp.escape host}\\z/i\n    end\n  end\nend\n```\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 6-1-open-redirect.patch - Patch for 6.1 series\n\nPlease note that only the 6.1.Z, 6.0.Z, and 5.2.Z series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n\nCredits\n-------\n\nThanks Jonathan Hefner (https://hackerone.com/jonathanhefner) for reporting this bug!","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-05-05T19:48:29.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/rails/rails/releases/tag/v6.1.3.2","https://groups.google.com/g/rubyonrails-security/c/8TxqXEtgSF0","https://nvd.nist.gov/vuln/detail/CVE-2021-22903","https://hackerone.com/reports/1148025","https://discuss.rubyonrails.org/t/cve-2021-22903-possible-open-redirect-vulnerability-in-action-pack/77867","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22903.yml","https://github.com/advisories/GHSA-5hq2-xf89-9jxq"],"source_kind":"github","identifiers":["GHSA-5hq2-xf89-9jxq","CVE-2021-22903"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:05.239Z","updated_at":"2026-10-29T08:14:13.107Z","epss_percentage":0.0123,"epss_percentile":0.6852,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVocTIteGY4OS05anhx","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVocTIteGY4OS05anhx","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.1.3.2","vulnerable_version_range":"\u003e= 6.1.0.rc2, \u003c 6.1.3.2"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["6.1.0","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0.rc1","6.1.3","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVocTIteGY4OS05anhx/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4d3ctNDZ4Mi0ycDY1","url":"https://github.com/advisories/GHSA-g8ww-46x2-2p65","title":"Denial of Service in Action Dispatch","description":"Impact\n------\nThere is a possible Denial of Service vulnerability in Action Dispatch. Carefully crafted Accept headers can cause the mime type parser in Action Dispatch to do catastrophic backtracking in the regular expression engine.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nThe following monkey patch placed in an initializer can be used to work around the issue.\n\n```ruby\nmodule Mime\n  class Type\n    MIME_REGEXP = /\\A(?:\\*\\/\\*|#{MIME_NAME}\\/(?:\\*|#{MIME_NAME})(?\u003e\\s*#{MIME_PARAMETER}\\s*)*)\\z/\n  end\nend\n```\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 6-0-Prevent-catastrophic-backtracking-during-mime-parsin.patch - Patch for 6.0 series\n* 6-1-Prevent-catastrophic-backtracking-during-mime-parsin.patch - Patch for 6.1 series\n\nPlease note that only the 6.1.Z, 6.0.Z, and 5.2.Z series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n\nCredits\n-------\n\nThanks to Security Curious \u003csecurity...@pm.me\u003e for reporting this!","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-05-05T19:48:21.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/rails/rails/releases/tag/v6.0.3.7","https://github.com/rails/rails/releases/tag/v6.1.3.2","https://groups.google.com/g/rubyonrails-security/c/_5ID_ld9u1c","https://nvd.nist.gov/vuln/detail/CVE-2021-22902","https://hackerone.com/reports/1138654","https://discuss.rubyonrails.org/t/cve-2021-22902-possible-denial-of-service-vulnerability-in-action-dispatch/77866","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22902.yml","https://github.com/advisories/GHSA-g8ww-46x2-2p65"],"source_kind":"github","identifiers":["GHSA-g8ww-46x2-2p65","CVE-2021-22902"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:05.249Z","updated_at":"2026-10-29T08:14:13.108Z","epss_percentage":0.02868,"epss_percentile":0.86572,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4d3ctNDZ4Mi0ycDY1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4d3ctNDZ4Mi0ycDY1","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.1.3.2","vulnerable_version_range":"\u003e= 6.1.0, \u003c= 6.1.3.1"},{"first_patched_version":"6.0.3.7","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.3.6"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["6.0.0","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.1.0","6.1.1","6.1.2","6.1.2.1","6.1.3.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.3","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0.rc1","6.1.0.rc2","6.1.3","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWc4d3ctNDZ4Mi0ycDY1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM1bW0tY2M2ci04Zmpw","url":"https://github.com/advisories/GHSA-35mm-cc6r-8fjp","title":"Cross-site scripting in actionpack","description":"In actionpack gem \u003e= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL which can allow the attacker to execute JavaScript in the context of the local application. This vulnerability is in the Actionable Exceptions middleware.\n\nWorkarounds\n-----------\nUntil such time as the patch can be applied, application developers should disable the Actionable Exceptions middleware in their development environment via a line such as this one in their config/environment/development.rb: `config.middleware.delete ActionDispatch::ActionableExceptions`","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-04-07T20:58:47.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-8264","https://hackerone.com/reports/904059","https://groups.google.com/g/rubyonrails-security/c/yQzUVfv42jk/m/oJWw-xhNAQAJ","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2020-8264.yml","https://groups.google.com/g/rubyonrails-security/c/yQzUVfv42jk","https://github.com/advisories/GHSA-35mm-cc6r-8fjp"],"source_kind":"github","identifiers":["GHSA-35mm-cc6r-8fjp","CVE-2020-8264"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:08.329Z","updated_at":"2026-09-30T09:14:46.288Z","epss_percentage":0.66986,"epss_percentile":0.99237,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM1bW0tY2M2ci04Zmpw","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM1bW0tY2M2ci04Zmpw","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.0.3.4","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.3.3"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM1bW0tY2M2ci04Zmpw/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4NzctcHJxNC05eGZ3","url":"https://github.com/advisories/GHSA-8877-prq4-9xfw","title":"Actionpack Open Redirect Vulnerability ","description":"The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. ","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-03-02T03:44:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2021-22881","https://hackerone.com/reports/1047447","https://benjamin-bouchet.com/cve-2021-22881-faille-de-securite-dans-le-middleware-hostauthorization/","https://discuss.rubyonrails.org/t/cve-2021-22881-possible-open-redirect-in-host-authorization-middleware/77130","https://rubygems.org/gems/actionpack","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3/","http://www.openwall.com/lists/oss-security/2021/05/05/2","http://www.openwall.com/lists/oss-security/2021/08/20/1","http://www.openwall.com/lists/oss-security/2021/12/14/5","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22881.yml","https://groups.google.com/g/rubyonrails-security/c/zN_3qA26l6E","https://github.com/rails/rails/commit/b5de7b3a4787d8a55aaad39f477c16e3af65e444","https://github.com/rails/rails/blob/v6.1.2.1/actionpack/CHANGELOG.md","https://github.com/advisories/GHSA-8877-prq4-9xfw"],"source_kind":"github","identifiers":["GHSA-8877-prq4-9xfw","CVE-2021-22881"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:11.262Z","updated_at":"2026-10-05T15:17:12.006Z","epss_percentage":0.87301,"epss_percentile":0.99729,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4NzctcHJxNC05eGZ3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4NzctcHJxNC05eGZ3","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.1.2.1","vulnerable_version_range":"\u003e= 6.1.0, \u003c= 6.1.2.0"},{"first_patched_version":"6.0.3.5","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.3.4"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4NzctcHJxNC05eGZ3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM2cXItaDV2cS01OWpj","url":"https://github.com/advisories/GHSA-c6qr-h5vq-59jc","title":"Untrusted users can run pending migrations in production in Rails","description":"There is a vulnerability in versions of Rails prior to 6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.\n\nThis vulnerability has been assigned the CVE identifier CVE-2020-8185.\n\nVersions Affected:  6.0.0 \u003c rails \u003c 6.0.3.2\nNot affected:       Applications with `config.action_dispatch.show_exceptions = false` (this is not a default setting in production)\nFixed Versions:     rails \u003e= 6.0.3.2\n\nImpact\n------\n\nUsing this issue, an attacker would be able to execute any migrations that are pending for a Rails app running in production mode. It is important to note that an attacker is limited to running migrations the application developer has already defined in their application and ones that have not already run.\n\nWorkarounds\n-----------\n\nUntil such time as the patch can be applied, application developers should disable the ActionDispatch middleware in their production environment via a line such as this one in their config/environment/production.rb:\n\n`config.middleware.delete ActionDispatch::ActionableExceptions`","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2020-06-24T17:40:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-8185","https://github.com/rails/rails/commit/2121b9d20b60ed503aa041ef7b926d331ed79fc2","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2020-8185.yml","https://groups.google.com/g/rubyonrails-security/c/pAe9EV8gbM0","https://hackerone.com/reports/899069","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJ7NUWXAEVRQCROIIBV4C6WXO6IR3KSB/","https://github.com/advisories/GHSA-c6qr-h5vq-59jc"],"source_kind":"github","identifiers":["GHSA-c6qr-h5vq-59jc","CVE-2020-8185"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:23.928Z","updated_at":"2026-10-29T08:18:35.309Z","epss_percentage":0.02181,"epss_percentile":0.81578,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM2cXItaDV2cS01OWpj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM2cXItaDV2cS01OWpj","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.0.3.2","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.3.1"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["6.0.0","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.3","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWM2cXItaDV2cS01OWpj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpwNXYtNWd4NC1qbWo5","url":"https://github.com/advisories/GHSA-jp5v-5gx4-jmj9","title":"Ability to forge per-form CSRF tokens in Rails","description":"It is possible to, given a global CSRF token such as the one present in the authenticity_token meta tag, forge a per-form CSRF token for any action for that session.\n\nImpact\n------\n\nGiven the ability to extract the global CSRF token, an attacker would be able to construct a per-form CSRF token for that session.\n\nWorkarounds\n-----------\n\nThis is a low-severity security issue. As such, no workaround is necessarily until such time as the application can be upgraded.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2020-05-26T15:11:13.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","references":["https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2020-8166.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/NOjKiGeXUgw","https://hackerone.com/reports/732415","https://nvd.nist.gov/vuln/detail/CVE-2020-8166","https://groups.google.com/g/rubyonrails-security/c/NOjKiGeXUgw","https://www.debian.org/security/2020/dsa-4766","https://github.com/advisories/GHSA-jp5v-5gx4-jmj9"],"source_kind":"github","identifiers":["GHSA-jp5v-5gx4-jmj9","CVE-2020-8166"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:24.558Z","updated_at":"2026-10-29T08:14:15.066Z","epss_percentage":0.01673,"epss_percentile":0.76508,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpwNXYtNWd4NC1qbWo5","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpwNXYtNWd4NC1qbWo5","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.0.3.1","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.3"},{"first_patched_version":"5.2.4.3","vulnerable_version_range":"\u003e= 5.0.0, \u003c= 5.2.4.2"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["5.0.0","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4.1","5.2.4.2","6.0.0","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.2.4","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWpwNXYtNWd4NC1qbWo5/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg3MjctbTZnai1tYzM3","url":"https://github.com/advisories/GHSA-8727-m6gj-mc37","title":"Possible Strong Parameters Bypass in ActionPack","description":"There is a strong parameters bypass vector in ActionPack.\n\nVersions Affected:  rails \u003c= 6.0.3\nNot affected:       rails \u003c 5.0.0\nFixed Versions:     rails \u003e= 5.2.4.3, rails \u003e= 6.0.3.1\n\nImpact\n------\nIn some cases user supplied information can be inadvertently leaked from\nStrong Parameters.  Specifically the return value of `each`, or `each_value`,\nor `each_pair` will return the underlying \"untrusted\" hash of data that was\nread from the parameters.  Applications that use this return value may be\ninadvertently use untrusted user input.\n\nImpacted code will look something like this:\n\n```\ndef update\n  # Attacker has included the parameter: `{ is_admin: true }`\n  User.update(clean_up_params)\nend\n\ndef clean_up_params\n   params.each { |k, v|  SomeModel.check(v) if k == :name }\nend\n```\n\nNote the mistaken use of `each` in the `clean_up_params` method in the above\nexample.\n\nWorkarounds\n-----------\nDo not use the return values of `each`, `each_value`, or `each_pair` in your\napplication.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2020-05-26T15:09:16.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-8164","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2020-8164.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/f6ioe4sdpbY","https://hackerone.com/reports/292797","https://groups.google.com/g/rubyonrails-security/c/f6ioe4sdpbY","https://lists.debian.org/debian-lts-announce/2020/06/msg00022.html","https://lists.debian.org/debian-lts-announce/2020/07/msg00013.html","https://www.debian.org/security/2020/dsa-4766","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00089.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00093.html","http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00107.html","https://github.com/advisories/GHSA-8727-m6gj-mc37"],"source_kind":"github","identifiers":["GHSA-8727-m6gj-mc37","CVE-2020-8164"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:24.568Z","updated_at":"2026-10-08T07:59:55.681Z","epss_percentage":0.04889,"epss_percentile":0.91845,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg3MjctbTZnai1tYzM3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg3MjctbTZnai1tYzM3","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"6.0.3.1","vulnerable_version_range":"\u003e= 6.0.0, \u003c= 6.0.3"},{"first_patched_version":"5.2.4.3","vulnerable_version_range":"\u003e= 5.0.0, \u003c= 5.2.4.2"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg3MjctbTZnai1tYzM3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ3ZmctcWozci02djNy","url":"https://github.com/advisories/GHSA-vwfg-qj3r-6v3r","title":"Moderate severity vulnerability that affects actionpack","description":"Withdrawn, accidental duplicate publish.\n\nThe http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to bypass authentication by measuring timing differences.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2018-09-17T21:57:47.000Z","withdrawn_at":"2020-06-17T15:15:11.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2015-7576","https://github.com/advisories/GHSA-vwfg-qj3r-6v3r"],"source_kind":"github","identifiers":["GHSA-vwfg-qj3r-6v3r"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:12:41.268Z","updated_at":"2026-10-29T08:17:07.092Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ3ZmctcWozci02djNy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ3ZmctcWozci02djNy","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.1.14.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.0"},{"first_patched_version":"3.2.22.1","vulnerable_version_range":"\u003c= 3.2.22.0"},{"first_patched_version":"4.2.5.1","vulnerable_version_range":"\u003e= 4.2.0, \u003c= 4.2.5.0"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.2.0","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1"],"unaffected_versions":["3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ3ZmctcWozci02djNy/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW01M2YtcmhxOC1xNmhm","url":"https://github.com/advisories/GHSA-m53f-rhq8-q6hf","title":"Moderate severity vulnerability that affects actionpack","description":"Withdrawn, accidental duplicate publish.\n\nactionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2018-09-17T21:55:03.000Z","withdrawn_at":"2020-06-17T15:14:56.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2016-0751","https://github.com/advisories/GHSA-m53f-rhq8-q6hf"],"source_kind":"github","identifiers":["GHSA-m53f-rhq8-q6hf"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:12:41.288Z","updated_at":"2026-10-18T20:26:27.546Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW01M2YtcmhxOC1xNmhm","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW01M2YtcmhxOC1xNmhm","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.2.5.1","vulnerable_version_range":"\u003e= 4.2.0, \u003c= 4.2.5.0"},{"first_patched_version":"4.1.14.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.0"},{"first_patched_version":"3.2.22.1","vulnerable_version_range":"\u003c= 3.2.22.0"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW01M2YtcmhxOC1xNmhm/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV4bWotd205Ni1mbXc4","url":"https://github.com/advisories/GHSA-5xmj-wm96-fmw8","title":"Moderate severity vulnerability that affects actionpack","description":"Withdrawn, accidental duplicate publish.\r\n\r\nDirectory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.21, 4.0.x before 4.0.12, 4.1.x before 4.1.8, and 4.2.x before 4.2.0.beta4, when serve_static_assets is enabled, allows remote attackers to determine the existence of files outside the application root via vectors involving a \\ (backslash) character, a similar issue to CVE-2014-7818.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2018-09-17T21:54:37.000Z","withdrawn_at":"2020-06-16T21:17:39.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2014-7829","https://github.com/advisories/GHSA-5xmj-wm96-fmw8"],"source_kind":"github","identifiers":["GHSA-5xmj-wm96-fmw8"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:36.178Z","updated_at":"2026-10-29T08:18:55.731Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV4bWotd205Ni1mbXc4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV4bWotd205Ni1mbXc4","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.1.8","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.1.8"},{"first_patched_version":"4.0.12","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.12"},{"first_patched_version":"3.2.21","vulnerable_version_range":"\u003c 3.2.21"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.1.0","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1"],"unaffected_versions":["3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.12","4.0.13","4.0.13.rc1","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV4bWotd205Ni1mbXc4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTIzdjMtcWZyai13bWdo","url":"https://github.com/advisories/GHSA-23v3-qfrj-wmgh","title":"Moderate severity vulnerability that affects actionpack","description":"Withdrawn, accidental duplicate publish.\r\n\r\nDirectory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4.2.0.beta3, when serve_static_assets is enabled, allows remote attackers to determine the existence of files outside the application root via a /..%2F sequence.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2018-09-17T21:54:22.000Z","withdrawn_at":"2020-06-16T20:51:08.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2014-7818","https://github.com/advisories/GHSA-23v3-qfrj-wmgh"],"source_kind":"github","identifiers":["GHSA-23v3-qfrj-wmgh"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:36.189Z","updated_at":"2026-10-29T08:18:55.732Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTIzdjMtcWZyai13bWdo","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTIzdjMtcWZyai13bWdo","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.1.7","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.1.7"},{"first_patched_version":"4.0.11","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.11"},{"first_patched_version":"3.2.20","vulnerable_version_range":"\u003c 3.2.20"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11.1","4.1.0","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7.1"],"unaffected_versions":["3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.11","4.0.12","4.0.13","4.0.13.rc1","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.7","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTIzdjMtcWZyai13bWdo/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFmNXgtcWd4Ny00Mzdo","url":"https://github.com/advisories/GHSA-qf5x-qgx7-437h","title":"Moderate severity vulnerability that affects actionpack","description":"Withdrawn, accidental duplicate publish.\r\n\r\nDirectory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2018-09-17T21:54:11.000Z","withdrawn_at":"2020-06-17T15:15:04.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2014-0130","https://github.com/advisories/GHSA-qf5x-qgx7-437h"],"source_kind":"github","identifiers":["GHSA-qf5x-qgx7-437h"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:36.200Z","updated_at":"2026-10-29T08:18:55.732Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFmNXgtcWd4Ny00Mzdo","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFmNXgtcWd4Ny00Mzdo","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.1.1","vulnerable_version_range":"= 4.1.0"},{"first_patched_version":"4.0.5","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.5"},{"first_patched_version":"3.2.18","vulnerable_version_range":"\u003c 3.2.18"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.1.0"],"unaffected_versions":["3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFmNXgtcWd4Ny00Mzdo/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU0NGotNzd4OS1oOTM4","url":"https://github.com/advisories/GHSA-544j-77x9-h938","title":"Moderate severity vulnerability that affects actionpack","description":"Withdrawn, accidental duplicate publish.\n\nactionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application's use of a wildcard controller route.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2018-09-17T21:53:30.000Z","withdrawn_at":"2020-06-16T20:59:59.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2015-7581","https://github.com/advisories/GHSA-544j-77x9-h938"],"source_kind":"github","identifiers":["GHSA-544j-77x9-h938"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:12:41.317Z","updated_at":"2026-09-30T09:17:53.841Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU0NGotNzd4OS1oOTM4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU0NGotNzd4OS1oOTM4","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.1.14.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.0"},{"first_patched_version":"4.2.5.1","vulnerable_version_range":"\u003e= 4.2.0, \u003c= 4.2.5.0"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTU0NGotNzd4OS1oOTM4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4NDYtdndteC13eDk1","url":"https://github.com/advisories/GHSA-hx46-vwmx-wx95","title":"High severity vulnerability that affects actionpack","description":"Withdrawn, accidental duplicate publish.\n\nAction Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2018-08-13T20:48:25.000Z","withdrawn_at":"2020-06-17T15:14:51.000Z","classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2016-2098","https://github.com/advisories/GHSA-hx46-vwmx-wx95"],"source_kind":"github","identifiers":["GHSA-hx46-vwmx-wx95"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:12:41.362Z","updated_at":"2026-10-12T14:16:21.544Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4NDYtdndteC13eDk1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4NDYtdndteC13eDk1","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.2.5.2","vulnerable_version_range":"\u003e= 4.2.0, \u003c= 4.2.5.1"},{"first_patched_version":"4.1.14.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.1"},{"first_patched_version":"3.2.22.2","vulnerable_version_range":"\u003e= 3.2.0, \u003c= 3.2.22.1"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWh4NDYtdndteC13eDk1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY5djQtN2pwNi04Yzcz","url":"https://github.com/advisories/GHSA-v9v4-7jp6-8c73","title":"rails Cross-site Scripting vulnerability","description":"The cross-site scripting (XSS) prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a problematic string method, as demonstrated by the sub method.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-2197","http://groups.google.com/group/rubyonrails-security/msg/663b600d4471e0d4?dmode=source\u0026output=gplain","http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062514.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062090.html","http://openwall.com/lists/oss-security/2011/06/09/2","http://openwall.com/lists/oss-security/2011/06/13/9","http://weblog.rubyonrails.org/2011/6/8/potential-xss-vulnerability-in-ruby-on-rails-applications","https://github.com/rails/rails/commit/53a2c0baf2b128dd4808eca313256f6f4bb8c4cd","https://github.com/rails/rails/commit/ed3796434af6069ced6a641293cf88eef3b284da","https://gist.github.com/NZKoz/b2ceb626fc2bcdfe497f","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activesupport/CVE-2011-2197.yml","https://github.com/advisories/GHSA-v9v4-7jp6-8c73"],"source_kind":"github","identifiers":["GHSA-v9v4-7jp6-8c73","CVE-2011-2197"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:37.993Z","updated_at":"2026-10-29T08:14:38.003Z","epss_percentage":0.01962,"epss_percentile":0.79526,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY5djQtN2pwNi04Yzcz","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY5djQtN2pwNi04Yzcz","packages":[{"ecosystem":"rubygems","package_name":"activesupport","versions":[{"first_patched_version":"3.0.8","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.7"},{"first_patched_version":"2.3.12","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.3.11"}],"purl":"pkg:gem/activesupport","statistics":{"dependent_packages_count":13637,"dependent_repos_count":1358186,"downloads":1463663750,"downloads_period":"total"},"affected_versions":["2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.6.pre","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7.rc1","3.0.7.rc2"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.1.0","1.1.1","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.3.0","1.3.1","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.7","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.9","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]},{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.0.8","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.7"},{"first_patched_version":"2.3.12","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.3.11"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7.rc1","3.0.7.rc2"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.7","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY5djQtN2pwNi04Yzcz/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4cjgtODMzdi1jN3dj","url":"https://github.com/advisories/GHSA-xxr8-833v-c7wc","title":"Cross-site Scripting vulnerability in i18n translations helper method","description":"Cross-site scripting (XSS) vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the rails_xss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string whose name ends with an \"html\" substring.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-4319","https://exchange.xforce.ibmcloud.com/vulnerabilities/71364","http://groups.google.com/group/rubyonrails-security/browse_thread/thread/2b61d70fb73c7cc5?pli=1","http://groups.google.com/group/rubyonrails-security/msg/c65c24fbc4b6dd82?dmode=source\u0026output=gplain","http://openwall.com/lists/oss-security/2011/11/18/8","http://weblog.rubyonrails.org/2011/11/18/rails-3-0-11-has-been-released","http://weblog.rubyonrails.org/2011/11/18/rails-3-1-2-has-been-released","https://github.com/rails/rails/commit/2d5b105d4bcb652550dda8b5613376d1b8beb70c","https://github.com/rails/rails/commit/ba2d85012088fd0db0fab98b2e512c77c83cbade","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-4319.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/K2HXD7c8fMU","https://web.archive.org/web/20200228155840/http://www.securityfocus.com/bid/50722","https://web.archive.org/web/20210307005941/http://www.securitytracker.com/id?1026342","https://github.com/advisories/GHSA-xxr8-833v-c7wc"],"source_kind":"github","identifiers":["GHSA-xxr8-833v-c7wc","CVE-2011-4319"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.061Z","updated_at":"2026-10-12T14:13:21.791Z","epss_percentage":0.01578,"epss_percentile":0.74501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4cjgtODMzdi1jN3dj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4cjgtODMzdi1jN3dj","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.1.2","vulnerable_version_range":"\u003e= 3.1.0, \u003c 3.1.2"},{"first_patched_version":"3.0.11","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.11"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4cjgtODMzdi1jN3dj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnOXctZzZtNC01NTdq","url":"https://github.com/advisories/GHSA-fg9w-g6m4-557j","title":"actionpack and activesupport vulnerable to information leaks","description":"A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2009-3086","http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","http://weblog.rubyonrails.org/2009/9/4/timing-weakness-in-ruby-on-rails","http://www.debian.org/security/2011/dsa-2260","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2009-3086.yml","https://github.com/rails/rails/commit/1f07a89c5946910fc28ea5ccd1da6af8a0f972a0","https://github.com/rails/rails/commit/674f780d59a5a7ec0301755d43a7b277a3ad2978","https://github.com/rails/rails/commit/d460c9a25560f43e7c3789abadf7b455053eb686","https://web.archive.org/web/20090906010200/http://www.vupen.com/english/advisories/2009/2544","https://web.archive.org/web/20090907001716/http://secunia.com/advisories/36600","https://web.archive.org/web/20200229150042/http://www.securityfocus.com/bid/37427","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activesupport/CVE-2009-3086.yml","https://github.com/advisories/GHSA-fg9w-g6m4-557j"],"source_kind":"github","identifiers":["GHSA-fg9w-g6m4-557j","CVE-2009-3086"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:37.907Z","updated_at":"2026-10-29T08:14:46.843Z","epss_percentage":0.02232,"epss_percentile":0.82504,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnOXctZzZtNC01NTdq","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnOXctZzZtNC01NTdq","packages":[{"ecosystem":"rubygems","package_name":"activesupport","versions":[{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003e= 2.1.0, \u003c 2.2.3"},{"first_patched_version":"2.3.4","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.4"}],"purl":"pkg:gem/activesupport","statistics":{"dependent_packages_count":13637,"dependent_repos_count":1358186,"downloads":1463663750,"downloads_period":"total"},"affected_versions":["2.1.0","2.1.1","2.1.2","2.2.2","2.3.2","2.3.3"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.1.0","1.1.1","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.3.0","1.3.1","1.4.0","1.4.1","1.4.2","1.4.3","1.4.4","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.2.3","2.3.4","2.3.5","2.3.6","2.3.6.pre","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.9","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]},{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"2.3.4","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.4"},{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003e= 2.1.0, \u003c 2.2.3"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["2.1.0","2.1.1","2.1.2","2.2.2","2.3.2","2.3.3"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.2.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZnOXctZzZtNC01NTdq/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThmcXgtN3B2NC0zandt","url":"https://github.com/advisories/GHSA-8fqx-7pv4-3jwm","title":"Improper Input Validation in actionpack","description":"Ruby on Rails 2.1 before 2.1.3 and 2.2.x before 2.2.2 does not verify tokens for requests with certain content types, which allows remote attackers to bypass cross-site request forgery (CSRF) protection for requests to applications that rely on this protection, as demonstrated using text/plain.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2008-7248","https://access.redhat.com/security/cve/CVE-2008-7248","https://bugzilla.redhat.com/show_bug.cgi?id=544329","https://groups.google.com/group/rubyonrails-security/browse_thread/thread/d741ee286e36e301?hl=en","https://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","https://pseudo-flaw.net/content/web-browsers/form-data-encoding-roundup/","https://weblog.rubyonrails.org/2008/11/18/potential-circumvention-of-csrf-protection-in-rails-2-1","https://www.openwall.com/lists/oss-security/2009/11/28/1","https://www.openwall.com/lists/oss-security/2009/12/02/2","https://www.rorsecurity.info/journal/2008/11/19/circumvent-rails-csrf-protection.html","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2008-7248.yml","http://groups.google.com/group/rubyonrails-security/browse_thread/thread/d741ee286e36e301?hl=en","http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html","http://pseudo-flaw.net/content/web-browsers/form-data-encoding-roundup/","http://weblog.rubyonrails.org/2008/11/18/potential-circumvention-of-csrf-protection-in-rails-2-1","http://www.openwall.com/lists/oss-security/2009/11/28/1","http://www.openwall.com/lists/oss-security/2009/12/02/2","https://github.com/rails/rails/commit/099a98e9b7108dae3e0f78b207e0a7dc5913bd1a","https://web.archive.org/web/20090906010200/https://www.vupen.com/english/advisories/2009/2544","https://github.com/advisories/GHSA-8fqx-7pv4-3jwm"],"source_kind":"github","identifiers":["GHSA-8fqx-7pv4-3jwm","CVE-2008-7248"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:37.878Z","updated_at":"2026-09-30T09:15:18.684Z","epss_percentage":0.0808,"epss_percentile":0.94506,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThmcXgtN3B2NC0zandt","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThmcXgtN3B2NC0zandt","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"2.2.2","vulnerable_version_range":"\u003e= 2.2.0, \u003c 2.2.2"},{"first_patched_version":"2.1.3","vulnerable_version_range":"\u003e= 2.1.0, \u003c 2.1.3"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThmcXgtN3B2NC0zandt/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThxcmgtaDltMi01ZnZm","url":"https://github.com/advisories/GHSA-8qrh-h9m2-5fvf","title":"Cross site scripting that affects rails","description":"Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2009-3009","https://exchange.xforce.ibmcloud.com/vulnerabilities/53036","https://github.com/advisories/GHSA-8qrh-h9m2-5fvf","http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=545063","http://groups.google.com/group/rubyonrails-security/msg/7f57cd7794e1d1b4?dmode=source","http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html","http://secunia.com/advisories/36600","http://secunia.com/advisories/36717","http://securitytracker.com/id?1022824","http://support.apple.com/kb/HT4077","http://weblog.rubyonrails.org/2009/9/4/xss-vulnerability-in-ruby-on-rails","http://www.debian.org/security/2009/dsa-1887","http://www.osvdb.org/57666","http://www.securityfocus.com/bid/36278","http://www.vupen.com/english/advisories/2009/2544","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activesupport/CVE-2009-3009.yml"],"source_kind":"github","identifiers":["GHSA-8qrh-h9m2-5fvf","CVE-2009-3009"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:37.897Z","updated_at":"2026-10-12T12:20:07.922Z","epss_percentage":0.03022,"epss_percentile":0.86501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThxcmgtaDltMi01ZnZm","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThxcmgtaDltMi01ZnZm","packages":[{"ecosystem":"rubygems","package_name":"activesupport","versions":[{"first_patched_version":"2.3.4","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.4"},{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.2.3"}],"purl":"pkg:gem/activesupport"},{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"2.3.4","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.4"},{"first_patched_version":"2.2.3","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.2.3"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThxcmgtaDltMi01ZnZm/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTkydzktMnBxdy1yaGpq","url":"https://github.com/advisories/GHSA-92w9-2pqw-rhjj","title":"actionpack Improper Authentication vulnerability","description":"The `decode_credentials` method in `actionpack/lib/action_controller/metal/http_authentication.rb` in Ruby on Rails before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a `with_http_digest` helper method, as demonstrated by the `authenticate_or_request_with_http_digest` method.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-3424","https://groups.google.com/group/rubyonrails-security/msg/244d32f2fa25147d?hl=en\u0026dmode=source\u0026output=gplain","http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html","http://rhn.redhat.com/errata/RHSA-2013-0154.html","https://github.com/rails/rails/commit/3719bd3e95523c5518507dbe44f260f252930600","http://weblog.rubyonrails.org/2012/7/26/ann-rails-3-2-7-has-been-released","https://github.com/advisories/GHSA-92w9-2pqw-rhjj"],"source_kind":"github","identifiers":["GHSA-92w9-2pqw-rhjj","CVE-2012-3424"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.167Z","updated_at":"2026-10-29T08:18:57.615Z","epss_percentage":0.01889,"epss_percentile":0.78771,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTkydzktMnBxdy1yaGpq","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTkydzktMnBxdy1yaGpq","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"2.3.5","vulnerable_version_range":"\u003c 2.3.5"},{"first_patched_version":"3.0.16","vulnerable_version_range":"\u003e= 3.0.0.beta, \u003c 3.0.16"},{"first_patched_version":"3.2.7","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.7"},{"first_patched_version":"3.1.7","vulnerable_version_range":"\u003e= 3.1.0, \u003c 3.1.7"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.1.0","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.2.0","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7.rc1"],"unaffected_versions":["2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0.rc1","3.2.0.rc2","3.2.7","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTkydzktMnBxdy1yaGpq/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3dzMtM3J4ai04djZx","url":"https://github.com/advisories/GHSA-4ww3-3rxj-8v6q","title":"actionpack allows remote attackers to bypass intended access restrictions","description":"`actionpack/lib/action_view/template/resolver.rb` in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-0449","http://groups.google.com/group/rubyonrails-security/msg/04345b2e84df5b4f?dmode=source\u0026output=gplain","http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html","http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4","https://github.com/rails/rails/commit/6f80224057803f85b3f448936aae89e742452c3b","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-0449.yml","https://web.archive.org/web/20201207190612/http://securitytracker.com/id?1025061","https://github.com/advisories/GHSA-4ww3-3rxj-8v6q"],"source_kind":"github","identifiers":["GHSA-4ww3-3rxj-8v6q","CVE-2011-0449"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:33.437Z","updated_at":"2026-10-29T08:18:49.965Z","epss_percentage":0.02498,"epss_percentile":0.84551,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3dzMtM3J4ai04djZx","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3dzMtM3J4ai04djZx","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.4"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4.rc1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.4","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3dzMtM3J4ai04djZx/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1dzYtcDZtZy12aDhq","url":"https://github.com/advisories/GHSA-75w6-p6mg-vh8j","title":"Rails actionpack gem vulnerable to Cross-site Scripting","description":"Multiple cross-site scripting (XSS) vulnerabilities in the `mail_to` helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) name or (2) email value.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-0446","http://groups.google.com/group/rubyonrails-security/msg/365b8a23b76a6b4a?dmode=source\u0026output=gplain","http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html","http://www.debian.org/security/2011/dsa-2247","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2011-0446.yml","https://groups.google.com/g/rubyonrails-security/c/8CpI7egxX4E/m/SmtqtyOKWzYJ","https://web.archive.org/web/20120527023027/http://www.securityfocus.com/bid/46291","https://web.archive.org/web/20200812054342/http://www.securitytracker.com/id?1025064","https://github.com/rails/rails/commit/abe97736b8316f1b714cac56c115c0779aa73217","https://github.com/rails/rails/commit/e3dd2107c57a8efaaea5d61cf8da65f7444760b2","https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43274","https://web.archive.org/web/20111225083933/http://secunia.com/advisories/43666","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-0446.yml","https://github.com/advisories/GHSA-75w6-p6mg-vh8j"],"source_kind":"github","identifiers":["GHSA-75w6-p6mg-vh8j","CVE-2011-0446"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:37.955Z","updated_at":"2026-10-29T08:14:46.844Z","epss_percentage":0.0235,"epss_percentile":0.83536,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1dzYtcDZtZy12aDhq","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1dzYtcDZtZy12aDhq","packages":[{"ecosystem":"rubygems","package_name":"actionview","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.4"},{"first_patched_version":"2.3.11","vulnerable_version_range":"\u003c 2.3.11"}],"purl":"pkg:gem/actionview","statistics":{"dependent_packages_count":369,"dependent_repos_count":601072,"downloads":797467353,"downloads_period":"total"},"affected_versions":[],"unaffected_versions":["4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.9","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]},{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.4"},{"first_patched_version":"2.3.11","vulnerable_version_range":"\u003c 2.3.11"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4.rc1"],"unaffected_versions":["2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.4","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc1dzYtcDZtZy12aDhq/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI0ZmctcDk2di1oeGg4","url":"https://github.com/advisories/GHSA-24fg-p96v-hxh8","title":"actionpack Cross-Site Request Forgery vulnerability","description":"Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged (1) AJAX or (2) API requests that leverage \"combinations of browser plugins and HTTP redirects,\" a related issue to CVE-2011-0696.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-0447","http://groups.google.com/group/rubyonrails-security/msg/c22ea1668c0d181c?dmode=source\u0026output=gplain","http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057650.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055074.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055088.html","http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails","http://www.debian.org/security/2011/dsa-2247","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-0447.yml","https://web.archive.org/web/20120527023027/http://www.securityfocus.com/bid/46291","https://web.archive.org/web/20170223045008/http://www.securitytracker.com/id?1025060","https://github.com/rails/rails/commit/66ce3843d32e9f2ac3b1da20067af53019bbb034","https://github.com/rails/rails/commit/7e86f9b4d2b7dfa974c10ae7e6d8ef90f3d77f06","https://github.com/advisories/GHSA-24fg-p96v-hxh8"],"source_kind":"github","identifiers":["GHSA-24fg-p96v-hxh8","CVE-2011-0447"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:37.965Z","updated_at":"2026-10-29T08:14:46.842Z","epss_percentage":0.01418,"epss_percentile":0.72558,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI0ZmctcDk2di1oeGg4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI0ZmctcDk2di1oeGg4","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.4"},{"first_patched_version":"2.3.11","vulnerable_version_range":"\u003e= 2.1.0, \u003c 2.3.11"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4.rc1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.4","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI0ZmctcDk2di1oeGg4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI3cTItNWdxZy02Yzdx","url":"https://github.com/advisories/GHSA-r7q2-5gqg-6c7q","title":"actionpack Improper Input Validation vulnerability","description":"The template selection functionality in `actionpack/lib/action_view/template/resolver.rb` in Ruby on Rails 3.0.x before 3.0.10 and 3.1.x before 3.1.0.rc6 does not properly handle glob characters, which allows remote attackers to render arbitrary views via a crafted URL, related to a \"filter skipping vulnerability.\"","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-2929","https://github.com/rails/rails/commit/5f94b93279f6d0682fafb237c301302c107a9552","https://bugzilla.redhat.com/show_bug.cgi?id=731432","http://groups.google.com/group/rubyonrails-security/msg/cbbbba6e4f7eaf61?dmode=source\u0026output=gplain","http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html","http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6","http://www.openwall.com/lists/oss-security/2011/08/17/1","http://www.openwall.com/lists/oss-security/2011/08/19/11","http://www.openwall.com/lists/oss-security/2011/08/20/1","http://www.openwall.com/lists/oss-security/2011/08/22/13","http://www.openwall.com/lists/oss-security/2011/08/22/14","http://www.openwall.com/lists/oss-security/2011/08/22/5","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-2929.yml","https://rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6","https://github.com/advisories/GHSA-r7q2-5gqg-6c7q"],"source_kind":"github","identifiers":["GHSA-r7q2-5gqg-6c7q","CVE-2011-2929"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.003Z","updated_at":"2026-10-29T08:18:57.608Z","epss_percentage":0.01813,"epss_percentile":0.78513,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI3cTItNWdxZy02Yzdx","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI3cTItNWdxZy02Yzdx","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.0.10","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.10"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10.rc1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.10","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXI3cTItNWdxZy02Yzdx/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY1amctNTU4ai1xNjdj","url":"https://github.com/advisories/GHSA-v5jg-558j-q67c","title":"actionpack Cross-site Scripting vulnerability","description":"Cross-site scripting (XSS) vulnerability in the `strip_tags` helper in `actionpack/lib/action_controller/vendor/html-scanner/html/node.rb` in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allows remote attackers to inject arbitrary web script or HTML via a tag with an invalid name.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-2931","https://github.com/rails/rails/commit/586a944ddd4d03e66dea1093306147594748037a","https://bugzilla.redhat.com/show_bug.cgi?id=731436","https://github.com/advisories/GHSA-v5jg-558j-q67c","http://groups.google.com/group/rubyonrails-security/msg/fd41ab62966e0fd1?dmode=source\u0026output=gplain","http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065109.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065137.html","http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065212.html","http://weblog.rubyonrails.org/2011/8/16/ann-rails-3-1-0-rc6","http://www.debian.org/security/2011/dsa-2301","http://www.openwall.com/lists/oss-security/2011/08/17/1","http://www.openwall.com/lists/oss-security/2011/08/19/11","http://www.openwall.com/lists/oss-security/2011/08/20/1","http://www.openwall.com/lists/oss-security/2011/08/22/13","http://www.openwall.com/lists/oss-security/2011/08/22/14","http://www.openwall.com/lists/oss-security/2011/08/22/5","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-2931.yml"],"source_kind":"github","identifiers":["GHSA-v5jg-558j-q67c","CVE-2011-2931"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.022Z","updated_at":"2026-10-29T08:18:57.610Z","epss_percentage":0.02492,"epss_percentile":0.84514,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY1amctNTU4ai1xNjdj","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY1amctNTU4ai1xNjdj","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.0.10","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.10"},{"first_patched_version":"2.3.13","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.3.13"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10.rc1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.10","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXY1amctNTU4ai1xNjdj/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjcWYtaDRoNC02OTVt","url":"https://github.com/advisories/GHSA-fcqf-h4h4-695m","title":"actionpack CRLF injection vulnerability","description":"CRLF injection vulnerability in `actionpack/lib/action_controller/response.rb` in Ruby on Rails 2.3.x before 2.3.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the Content-Type header.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-3186","https://github.com/rails/rails/commit/11dafeaa7533be26441a63618be93a03869c83a9","https://bugzilla.redhat.com/show_bug.cgi?id=732156","http://groups.google.com/group/rubyonrails-security/msg/bbe342e43abaa78c?dmode=source\u0026output=gplain","http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065137.html","http://www.debian.org/security/2011/dsa-2301","http://www.openwall.com/lists/oss-security/2011/08/17/1","http://www.openwall.com/lists/oss-security/2011/08/19/11","http://www.openwall.com/lists/oss-security/2011/08/20/1","http://www.openwall.com/lists/oss-security/2011/08/22/13","http://www.openwall.com/lists/oss-security/2011/08/22/14","http://www.openwall.com/lists/oss-security/2011/08/22/5","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-3186.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/b_yTveAph2g","https://web.archive.org/web/20150201000000*/http://secunia.com/advisories/45921","https://github.com/advisories/GHSA-fcqf-h4h4-695m"],"source_kind":"github","identifiers":["GHSA-fcqf-h4h4-695m","CVE-2011-3186"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.041Z","updated_at":"2026-10-29T08:18:57.611Z","epss_percentage":0.01748,"epss_percentile":0.77518,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjcWYtaDRoNC02OTVt","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjcWYtaDRoNC02OTVt","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"2.3.13","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.13"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZjcWYtaDRoNC02OTVt/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTN2ZnctN3JjcC0zeGdt","url":"https://github.com/advisories/GHSA-3vfw-7rcp-3xgm","title":"actionpack Improper Input Validation vulnerability","description":"The `to_s` method in `actionpack/lib/action_dispatch/middleware/remote_ip.rb` in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2011-3187","https://bugzilla.novell.com/show_bug.cgi?id=673010","http://webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.html","http://www.openwall.com/lists/oss-security/2011/08/17/1","http://www.openwall.com/lists/oss-security/2011/08/19/11","http://www.openwall.com/lists/oss-security/2011/08/20/1","http://www.openwall.com/lists/oss-security/2011/08/22/13","http://www.openwall.com/lists/oss-security/2011/08/22/14","http://www.openwall.com/lists/oss-security/2011/08/22/5","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-3187.yml","https://web.archive.org/web/20111209181000/http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0337.html","https://github.com/advisories/GHSA-3vfw-7rcp-3xgm"],"source_kind":"github","identifiers":["GHSA-3vfw-7rcp-3xgm","CVE-2011-3187"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.051Z","updated_at":"2026-10-29T08:18:57.612Z","epss_percentage":0.06666,"epss_percentile":0.93501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTN2ZnctN3JjcC0zeGdt","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTN2ZnctN3JjcC0zeGdt","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"2.3.13","vulnerable_version_range":"\u003e= 2.3.0, \u003c 2.3.13"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTN2ZnctN3JjcC0zeGdt/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4amotNXg2aC04dm1m","url":"https://github.com/advisories/GHSA-2xjj-5x6h-8vmf","title":"Cross-site Scripting in actionpack","description":"Cross-site scripting (XSS) vulnerability in `actionpack/lib/action_view/helpers/form_options_helper.rb` in the select helper in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving certain generation of OPTION elements within SELECT elements.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-1099","https://bugzilla.redhat.com/show_bug.cgi?id=799276","https://github.com/advisories/GHSA-2xjj-5x6h-8vmf","http://groups.google.com/group/rubyonrails-security/msg/6fca4f5c47705488?dmode=source\u0026output=gplain","http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075675.html","http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075740.html","http://weblog.rubyonrails.org/2012/3/1/ann-rails-3-0-12-has-been-released","http://www.debian.org/security/2012/dsa-2466","http://www.openwall.com/lists/oss-security/2012/03/02/6","http://www.openwall.com/lists/oss-security/2012/03/03/1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2012-1099.yml"],"source_kind":"github","identifiers":["GHSA-2xjj-5x6h-8vmf","CVE-2012-1099"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.080Z","updated_at":"2026-10-29T08:14:06.550Z","epss_percentage":0.02386,"epss_percentile":0.83844,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4amotNXg2aC04dm1m","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4amotNXg2aC04dm1m","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.2.2","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.2"},{"first_patched_version":"3.1.4","vulnerable_version_range":"\u003e= 3.1.0, \u003c 3.1.4"},{"first_patched_version":"3.0.12","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.12"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12.rc1","3.1.0","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4.rc1","3.2.0","3.2.1","3.2.2.rc1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.12","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.4","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0.rc1","3.2.0.rc2","3.2.2","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJ4amotNXg2aC04dm1m/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncHAtcHA4OS00Zmdm","url":"https://github.com/advisories/GHSA-hgpp-pp89-4fgf","title":"Action Pack contains database-query restrictions bypass","description":"`actionpack/lib/action_dispatch/http/request.rb` in Ruby on Rails before 2.3.16, 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain `[nil]` values, a related issue to CVE-2012-2694.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-2660","https://groups.google.com/group/rubyonrails-security/msg/d890f8d58b5fbf32?dmode=source\u0026output=gplain","http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html","http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00016.html","http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00017.html","http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html","http://rhn.redhat.com/errata/RHSA-2013-0154.html","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2012-2660.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2012-2660.yml","https://groups.google.com/g/rubyonrails-security/c/8SA-M3as7A8/m/Mr9fi9X4kNgJ","https://github.com/rails/rails/commit/61eed87ce32caf534bf1f52dd8134097b4ad9e1b","https://github.com/advisories/GHSA-hgpp-pp89-4fgf"],"source_kind":"github","identifiers":["GHSA-hgpp-pp89-4fgf","CVE-2012-2660"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.119Z","updated_at":"2026-10-29T08:14:06.531Z","epss_percentage":0.04549,"epss_percentile":0.91518,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncHAtcHA4OS00Zmdm","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncHAtcHA4OS00Zmdm","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"2.3.16","vulnerable_version_range":"\u003c 2.3.16"},{"first_patched_version":"3.0.13","vulnerable_version_range":"\u003e= 3.0.0.beta, \u003c 3.0.13"},{"first_patched_version":"3.2.4","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.4"},{"first_patched_version":"3.1.5","vulnerable_version_range":"\u003e= 3.1.0, \u003c 3.1.5"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13.rc1","3.1.0","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5.rc1","3.2.0","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4.rc1"],"unaffected_versions":["2.3.16","2.3.17","2.3.18","3.0.13","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.5","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0.rc1","3.2.0.rc2","3.2.4","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWhncHAtcHA4OS00Zmdm/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEzNGMtNDhnYy1tOWc4","url":"https://github.com/advisories/GHSA-q34c-48gc-m9g8","title":"actionpack allows remote attackers to bypass database-query restrictions, perform NULL checks via crafted request","description":"`actionpack/lib/action_dispatch/http/request.rb` in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain `['xyz', nil]` values, a related issue to CVE-2012-2660.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-2694","https://groups.google.com/group/rubyonrails-security/msg/e2d3a87f2c211def?dmode=source\u0026output=gplain","http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00002.html","http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00014.html","http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00016.html","http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00017.html","http://lists.opensuse.org/opensuse-updates/2012-08/msg00046.html","http://rhn.redhat.com/errata/RHSA-2013-0154.html","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2012-2694.yml","https://groups.google.com/g/rubyonrails-security/c/jILZ34tAHF4/m/7x0hLH-o0-IJ","https://github.com/rails/rails/commit/2f3bc0467311781ac1ceb2c8c2b09002c8fe143a","https://github.com/rails/rails/commit/c202638225519b5e1a03ebe523b109c948fb0e52","https://github.com/advisories/GHSA-q34c-48gc-m9g8"],"source_kind":"github","identifiers":["GHSA-q34c-48gc-m9g8","CVE-2012-2694"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.138Z","updated_at":"2026-10-29T08:18:57.614Z","epss_percentage":0.03887,"epss_percentile":0.90162,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEzNGMtNDhnYy1tOWc4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEzNGMtNDhnYy1tOWc4","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.0.14","vulnerable_version_range":"\u003e= 3.0.13, \u003c 3.0.14"},{"first_patched_version":"3.2.6","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.6"},{"first_patched_version":"3.1.6","vulnerable_version_range":"\u003e= 3.1.0, \u003c 3.1.6"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.13","3.1.0","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.2.0","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0.rc1","3.2.0.rc2","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXEzNGMtNDhnYy1tOWc4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk4bWYtOGY1Ny02NHFm","url":"https://github.com/advisories/GHSA-98mf-8f57-64qf","title":"actionpack Cross-site Scripting vulnerability","description":"Cross-site scripting (XSS) vulnerability in `actionpack/lib/action_view/helpers/form_tag_helper.rb` in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the `prompt` field to the `select_tag` helper.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-3463","https://groups.google.com/group/rubyonrails-security/msg/961e18e514527078?dmode=source\u0026output=gplain","http://rhn.redhat.com/errata/RHSA-2013-0154.html","http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released/","https://github.com/rails/rails/commit/6d0526db91afb0675c2ad3d871529d1536303c64","https://groups.google.com/g/rubyonrails-security/c/fV3QUToSMSw/m/eHBSFOUYHpYJ?pli=1","https://github.com/advisories/GHSA-98mf-8f57-64qf"],"source_kind":"github","identifiers":["GHSA-98mf-8f57-64qf","CVE-2012-3463"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:12:10.572Z","updated_at":"2026-10-29T08:18:57.616Z","epss_percentage":0.01306,"epss_percentile":0.69511,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk4bWYtOGY1Ny02NHFm","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk4bWYtOGY1Ny02NHFm","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.0.17","vulnerable_version_range":"\u003e= 3.0, \u003c 3.0.17"},{"first_patched_version":"3.2.8","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.8"},{"first_patched_version":"3.1.8","vulnerable_version_range":"\u003e= 3.1.0, \u003c 3.1.8"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.1.0","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.2.0","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8.rc1","3.2.8.rc2"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0.rc1","3.2.0.rc2","3.2.8","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk4bWYtOGY1Ny02NHFm/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptZ3ctNnZqZy1qandn","url":"https://github.com/advisories/GHSA-jmgw-6vjg-jjwg","title":"actionpack Improper Input Validation vulnerability","description":"`active_support/core_ext/hash/conversions.rb` in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2017-10-24T18:33:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-0156","https://community.rapid7.com/community/metasploit/blog/2013/01/09/serialization-mischief-in-ruby-land-cve-2013-0156","https://groups.google.com/group/rubyonrails-security/msg/c1432d0f8c70e89d?dmode=source\u0026output=gplain","http://rhn.redhat.com/errata/RHSA-2013-0153.html","http://rhn.redhat.com/errata/RHSA-2013-0154.html","http://rhn.redhat.com/errata/RHSA-2013-0155.html","http://weblog.rubyonrails.org/2013/1/28/Rails-3-0-20-and-2-3-16-have-been-released/","http://www.debian.org/security/2013/dsa-2604","http://www.fujitsu.com/global/support/software/security/products-f/sw-sv-rcve-ror201301e.html","http://www.insinuator.net/2013/01/rails-yaml/","http://www.kb.cert.org/vuls/id/380039","http://www.kb.cert.org/vuls/id/628463","https://web.archive.org/web/20140111025708/http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html","https://web.archive.org/web/20160415043747/https://ics-cert.us-cert.gov/advisories/ICSA-13-036-01A","https://web.archive.org/web/20160806154149/https://puppet.com/security/cve/cve-2013-0156/","https://github.com/advisories/GHSA-jmgw-6vjg-jjwg"],"source_kind":"github","identifiers":["GHSA-jmgw-6vjg-jjwg","CVE-2013-0156"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.272Z","updated_at":"2026-10-29T08:18:59.272Z","epss_percentage":0.99449,"epss_percentile":0.99937,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptZ3ctNnZqZy1qandn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptZ3ctNnZqZy1qandn","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.2.11","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.11"},{"first_patched_version":"3.1.10","vulnerable_version_range":"\u003e= 3.1.0, \u003c 3.1.10"},{"first_patched_version":"3.0.19","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.0.19"},{"first_patched_version":"2.3.15","vulnerable_version_range":"\u003c 2.3.15"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.1.0","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.2.0","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10"],"unaffected_versions":["2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.19","3.0.20","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.10","3.1.11","3.1.12","3.2.0.rc1","3.2.0.rc2","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWptZ3ctNnZqZy1qandn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NTktaHd2Yy1tM2pn","url":"https://github.com/advisories/GHSA-q759-hwvc-m3jg","title":"actionpack Cross-site Scripting vulnerability","description":"The `sanitize_css` method in `lib/action_controller/vendor/html-scanner/html/sanitizer.rb` in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle `\\n` (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-1855","https://groups.google.com/group/rubyonrails-security/msg/8ed835a97cdd1afd?dmode=source\u0026output=gplain","http://lists.opensuse.org/opensuse-updates/2013-04/msg00072.html","http://lists.opensuse.org/opensuse-updates/2013-04/msg00073.html","http://lists.opensuse.org/opensuse-updates/2014-01/msg00013.html","http://rhn.redhat.com/errata/RHSA-2013-0698.html","http://rhn.redhat.com/errata/RHSA-2014-1863.html","http://support.apple.com/kb/HT5784","http://weblog.rubyonrails.org/2013/3/18/SEC-ANN-Rails-3-2-13-3-1-12-and-2-3-18-have-been-released/","https://web.archive.org/web/20130609174600/http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","https://web.archive.org/web/20131109010518/http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html","https://access.redhat.com/errata/RHSA-2013:0698","https://access.redhat.com/errata/RHSA-2014:1863","https://access.redhat.com/security/cve/CVE-2013-1855","https://bugzilla.redhat.com/show_bug.cgi?id=921331","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2013-1855.yml","https://github.com/advisories/GHSA-q759-hwvc-m3jg"],"source_kind":"github","identifiers":["GHSA-q759-hwvc-m3jg","CVE-2013-1855"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.458Z","updated_at":"2026-10-29T08:14:06.552Z","epss_percentage":0.0263,"epss_percentile":0.84955,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NTktaHd2Yy1tM2pn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NTktaHd2Yy1tM2pn","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.2.13","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.13"},{"first_patched_version":"3.1.12","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.1.12"},{"first_patched_version":"2.3.18","vulnerable_version_range":"\u003c 2.3.18"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.2.0","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13.rc1","3.2.13.rc2"],"unaffected_versions":["2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.1.12","3.2.0.rc1","3.2.0.rc2","3.2.13","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE3NTktaHd2Yy1tM2pn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5OW0tbWNqbS05Y3c4","url":"https://github.com/advisories/GHSA-699m-mcjm-9cw8","title":"actionpack vulnerable to Cross-site Scripting","description":"Cross-site scripting (XSS) vulnerability in `actionpack/lib/action_view/helpers/translation_helper.rb` in the internationalization component in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted string that triggers generation of a fallback string by the i18n gem.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-4491","https://github.com/advisories/GHSA-699m-mcjm-9cw8","http://rhn.redhat.com/errata/RHSA-2013-1794.html","http://rhn.redhat.com/errata/RHSA-2014-0008.html","http://rhn.redhat.com/errata/RHSA-2014-1863.html","http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/","http://www.debian.org/security/2014/dsa-2888","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2013-4491.yml","https://groups.google.com/forum/#!topic/ruby-security-ann/pLrh6DUw998"],"source_kind":"github","identifiers":["GHSA-699m-mcjm-9cw8","CVE-2013-4491"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.654Z","updated_at":"2026-10-29T08:14:08.207Z","epss_percentage":0.02233,"epss_percentile":0.82508,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5OW0tbWNqbS05Y3c4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5OW0tbWNqbS05Y3c4","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.0.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.2"},{"first_patched_version":"3.2.16","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.16"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY5OW0tbWNqbS05Y3c4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1weGYtZ2N3Mi1wdzVx","url":"https://github.com/advisories/GHSA-mpxf-gcw2-pw5q","title":"actionpack Improper Input Validation vulnerability","description":"`actionpack/lib/action_view/lookup_context.rb` in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a header containing an invalid MIME type that leads to excessive caching.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-6414","https://groups.google.com/forum/message/raw?msg=ruby-security-ann/A-ebV4WxzKg/KNPTbX8XAQUJ","http://lists.opensuse.org/opensuse-updates/2013-12/msg00079.html","http://lists.opensuse.org/opensuse-updates/2013-12/msg00081.html","http://lists.opensuse.org/opensuse-updates/2013-12/msg00082.html","http://lists.opensuse.org/opensuse-updates/2014-01/msg00003.html","http://rhn.redhat.com/errata/RHSA-2013-1794.html","http://rhn.redhat.com/errata/RHSA-2014-0008.html","http://rhn.redhat.com/errata/RHSA-2014-1863.html","http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/","http://www.debian.org/security/2014/dsa-2888","http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/","https://web.archive.org/web/20160421165124/http://secunia.com/advisories/57836","https://web.archive.org/web/20160808161629/https://puppet.com/security/cve/cve-2013-6414","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2013-6414.yml","https://groups.google.com/forum/#!topic/ruby-security-ann/A-ebV4WxzKg","https://puppet.com/security/cve/cve-2013-6414","https://github.com/advisories/GHSA-mpxf-gcw2-pw5q"],"source_kind":"github","identifiers":["GHSA-mpxf-gcw2-pw5q","CVE-2013-6414"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.702Z","updated_at":"2026-10-29T08:18:59.299Z","epss_percentage":0.207,"epss_percentile":0.975,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1weGYtZ2N3Mi1wdzVx","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1weGYtZ2N3Mi1wdzVx","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.0.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.2"},{"first_patched_version":"3.2.16","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.16"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1weGYtZ2N3Mi1wdzVx/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MzgtdmZwcS1mbWYy","url":"https://github.com/advisories/GHSA-j838-vfpq-fmf2","title":"actionpack Cross-site Scripting vulnerability","description":"The sanitize helper in `lib/action_controller/vendor/html-scanner/html/sanitizer.rb` in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded `:` (colon) characters in URLs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted scheme name, as demonstrated by including a `\u0026#x3a;` sequence.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-1857","https://groups.google.com/group/rubyonrails-security/msg/78b9817a5943f6d6?dmode=source\u0026output=gplain","http://lists.opensuse.org/opensuse-updates/2013-04/msg00072.html","http://lists.opensuse.org/opensuse-updates/2013-04/msg00073.html","http://lists.opensuse.org/opensuse-updates/2014-01/msg00013.html","http://rhn.redhat.com/errata/RHSA-2013-0698.html","http://rhn.redhat.com/errata/RHSA-2014-1863.html","http://support.apple.com/kb/HT5784","http://weblog.rubyonrails.org/2013/3/18/SEC-ANN-Rails-3-2-13-3-1-12-and-2-3-18-have-been-released/","https://web.archive.org/web/20130609174600/http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html","https://web.archive.org/web/20131109010518/http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html","https://github.com/advisories/GHSA-j838-vfpq-fmf2"],"source_kind":"github","identifiers":["GHSA-j838-vfpq-fmf2","CVE-2013-1857"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.485Z","updated_at":"2026-10-29T08:18:59.275Z","epss_percentage":0.01853,"epss_percentile":0.78501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MzgtdmZwcS1mbWYy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MzgtdmZwcS1mbWYy","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.2.13","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.13"},{"first_patched_version":"3.1.12","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.1.12"},{"first_patched_version":"2.3.18","vulnerable_version_range":"\u003c 2.3.18"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.2.0","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13.rc1","3.2.13.rc2"],"unaffected_versions":["2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.1.12","3.2.0.rc1","3.2.0.rc2","3.2.13","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWo4MzgtdmZwcS1mbWYy/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnNjUtZ2hyZy1ocGY1","url":"https://github.com/advisories/GHSA-7g65-ghrg-hpf5","title":"actionpack Cross-site Scripting vulnerability","description":"Cross-site scripting (XSS) vulnerability in `actionpack/lib/action_view/helpers/sanitize_helper.rb` in the `strip_tags` helper in Ruby on Rails before 2.3.16, 3.0.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2012-3465","https://groups.google.com/group/rubyonrails-security/msg/7fbb5392d4d282b5?dmode=source\u0026output=gplain","http://rhn.redhat.com/errata/RHSA-2013-0154.html","https://github.com/rails/rails/commit/e91e4e8bbee12ce1496bf384c04da6be296b687a","https://github.com/rails/rails/commit/cf48c9c7dcbef8543171f7f7de8d3d9a16b58e77","http://weblog.rubyonrails.org/2012/8/9/ann-rails-3-2-8-has-been-released","https://github.com/advisories/GHSA-7g65-ghrg-hpf5"],"source_kind":"github","identifiers":["GHSA-7g65-ghrg-hpf5","CVE-2012-3465"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.186Z","updated_at":"2026-10-29T08:18:59.270Z","epss_percentage":0.01977,"epss_percentile":0.79605,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnNjUtZ2hyZy1ocGY1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnNjUtZ2hyZy1ocGY1","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"2.3.16","vulnerable_version_range":"\u003c 2.3.16"},{"first_patched_version":"3.0.17","vulnerable_version_range":"\u003e= 3.0.0.beta, \u003c 3.0.17"},{"first_patched_version":"3.2.8","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.8"},{"first_patched_version":"3.1.8","vulnerable_version_range":"\u003e= 3.1.0, \u003c 3.1.8"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.1.0","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.2.0","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8.rc1","3.2.8.rc2"],"unaffected_versions":["2.3.16","2.3.17","2.3.18","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0.rc1","3.2.0.rc2","3.2.8","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdnNjUtZ2hyZy1ocGY1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1Nm0tdnd4Yy0zcXB3","url":"https://github.com/advisories/GHSA-h56m-vwxc-3qpw","title":"Directory traversal vulnerability in actionpack","description":"Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.21, 4.0.x before 4.0.12, 4.1.x before 4.1.8, and 4.2.x before 4.2.0.beta4, when serve_static_assets is enabled, allows remote attackers to determine the existence of files outside the application root via vectors involving a \\ (backslash) character, a similar issue to CVE-2014-7818.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2014-7829","https://github.com/advisories/GHSA-h56m-vwxc-3qpw","https://groups.google.com/forum/message/raw?msg=rubyonrails-security/rMTQy4oRCGk/loS_CRS8mNEJ","https://puppet.com/security/cve/cve-2014-7829","http://lists.opensuse.org/opensuse-updates/2014-11/msg00112.html","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-7829.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/rMTQy4oRCGk","https://web.archive.org/web/20160403085126/http://www.securityfocus.com/bid/71183"],"source_kind":"github","identifiers":["GHSA-h56m-vwxc-3qpw","CVE-2014-7829"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:24.049Z","updated_at":"2026-10-29T08:14:08.205Z","epss_percentage":0.04162,"epss_percentile":0.90508,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1Nm0tdnd4Yy0zcXB3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1Nm0tdnd4Yy0zcXB3","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.2.0.beta4","vulnerable_version_range":"\u003e= 4.2.0.beta1, \u003c 4.2.0.beta4"},{"first_patched_version":"4.1.8","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.1.8"},{"first_patched_version":"4.0.12","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.12"},{"first_patched_version":"3.2.21","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.21"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.1.0","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.12","4.0.13","4.0.13.rc1","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWg1Nm0tdnd4Yy0zcXB3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwdzctd3hqbS1jdzhy","url":"https://github.com/advisories/GHSA-wpw7-wxjm-cw8r","title":"actionpack allows bypass of database-query restrictions","description":"`actionpack/lib/action_dispatch/http/request.rb` in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request that leverages (1) third-party Rack middleware or (2) custom Rack middleware.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-0155.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-6417","https://groups.google.com/forum/message/raw?msg=ruby-security-ann/niK4drpSHT4/g8JW8ZsayRkJ","http://lists.opensuse.org/opensuse-updates/2013-12/msg00079.html","http://lists.opensuse.org/opensuse-updates/2013-12/msg00081.html","http://lists.opensuse.org/opensuse-updates/2013-12/msg00082.html","http://lists.opensuse.org/opensuse-updates/2014-01/msg00003.html","http://rhn.redhat.com/errata/RHSA-2013-1794.html","http://rhn.redhat.com/errata/RHSA-2014-0008.html","http://rhn.redhat.com/errata/RHSA-2014-0469.html","http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/","http://www.debian.org/security/2014/dsa-2888","https://web.archive.org/web/20160806051251/https://puppet.com/security/cve/cve-2013-6417","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2013-6417.yml","https://groups.google.com/forum/#!topic/ruby-security-ann/niK4drpSHT4","https://puppet.com/security/cve/cve-2013-6417","https://github.com/advisories/GHSA-wpw7-wxjm-cw8r"],"source_kind":"github","identifiers":["GHSA-wpw7-wxjm-cw8r","CVE-2013-6417"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.731Z","updated_at":"2026-10-29T08:14:08.207Z","epss_percentage":0.02371,"epss_percentile":0.835,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwdzctd3hqbS1jdzhy","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwdzctd3hqbS1jdzhy","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.0.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.2"},{"first_patched_version":"3.2.16","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.16"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdwdzctd3hqbS1jdzhy/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloNmctZ3A5NS14M3E1","url":"https://github.com/advisories/GHSA-9h6g-gp95-x3q5","title":"actionpack is vulnerable to denial of service because of a wildcard controller route","description":"actionpack/lib/action_dispatch/routing/route_set.rb in Action Pack in Ruby on Rails 4.x before 4.2.5.1 and 5.x before 5.0.0.beta1.1 allows remote attackers to cause a denial of service (superfluous caching and memory consumption) by leveraging an application's use of a wildcard controller route.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2015-7581","https://groups.google.com/forum/message/raw?msg=ruby-security-ann/dthJ5wL69JE/IdvCimtZEgAJ","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html","http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html","http://rhn.redhat.com/errata/RHSA-2016-0296.html","http://www.debian.org/security/2016/dsa-3464","http://www.openwall.com/lists/oss-security/2016/01/25/16","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2015-7581.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/dthJ5wL69JE","https://web.archive.org/web/20200228001849/http://www.securityfocus.com/bid/81677","https://web.archive.org/web/20200516093752/http://www.securitytracker.com/id/1034816","https://github.com/advisories/GHSA-9h6g-gp95-x3q5"],"source_kind":"github","identifiers":["GHSA-9h6g-gp95-x3q5","CVE-2015-7581"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:12:59.246Z","updated_at":"2026-09-30T09:18:24.658Z","epss_percentage":0.06715,"epss_percentile":0.93625,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloNmctZ3A5NS14M3E1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloNmctZ3A5NS14M3E1","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.2.5.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.2.5.0"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloNmctZ3A5NS14M3E1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA2OTItN21tMy0zZnhn","url":"https://github.com/advisories/GHSA-p692-7mm3-3fxg","title":"actionpack is vulnerable to remote bypass authentication","description":"The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation in Action Controller in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to bypass authentication by measuring timing differences.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":3.7,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2015-7576","https://groups.google.com/forum/message/raw?msg=ruby-security-ann/ANv0HDHEC3k/T8Hgq-hYEgAJ","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178047.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178068.html","http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html","http://rhn.redhat.com/errata/RHSA-2016-0296.html","http://www.debian.org/security/2016/dsa-3464","http://www.openwall.com/lists/oss-security/2016/01/25/8","https://github.com/rails/rails/commit/17e6f1507b7f2c2a883c180f4f9548445d6dfbd","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2015-7576.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/ANv0HDHEC3k","https://web.archive.org/web/20160405205300/http://www.securitytracker.com/id/1034816","https://web.archive.org/web/20200228001849/http://www.securityfocus.com/bid/81803","https://github.com/advisories/GHSA-p692-7mm3-3fxg"],"source_kind":"github","identifiers":["GHSA-p692-7mm3-3fxg","CVE-2015-7576"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.428Z","updated_at":"2026-09-30T09:18:26.575Z","epss_percentage":0.04879,"epss_percentile":0.91663,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA2OTItN21tMy0zZnhn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA2OTItN21tMy0zZnhn","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.1.14.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.0"},{"first_patched_version":"3.2.22.1","vulnerable_version_range":"\u003e= 3.1.0, \u003c= 3.2.22.0"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA2OTItN21tMy0zZnhn/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczN2MtcTY1My1xZzk1","url":"https://github.com/advisories/GHSA-w37c-q653-qg95","title":"actionpack Cross-site Scripting vulnerability","description":"Cross-site scripting (XSS) vulnerability in the simple_format helper in `actionpack/lib/action_view/helpers/text_helper.rb` in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted HTML attribute.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-6416","https://groups.google.com/forum/message/raw?msg=ruby-security-ann/5ZI1-H5OoIM/ZNq4FoR2GnIJ","http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/","https://web.archive.org/web/20200228165109/http://www.securityfocus.com/bid/64071","https://github.com/rails/rails/commit/4b4f5847f64f81c961625e647711ef9f6ad1a454","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2013-6416.yml","https://groups.google.com/forum/#!topic/ruby-security-ann/5ZI1-H5OoIM","https://github.com/advisories/GHSA-w37c-q653-qg95"],"source_kind":"github","identifiers":["GHSA-w37c-q653-qg95","CVE-2013-6416"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.721Z","updated_at":"2026-10-29T08:18:59.300Z","epss_percentage":0.01963,"epss_percentile":0.79533,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczN2MtcTY1My1xZzk1","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczN2MtcTY1My1xZzk1","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.0.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.2"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXczN2MtcTY1My1xZzk1/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00NnAtZ2dtNS01ajgz","url":"https://github.com/advisories/GHSA-m46p-ggm5-5j83","title":"Rails vulnerable to Cross-site Scripting","description":"There is an XSS vulnerability in the `number_to_currency`, `number_to_percentage` and `number_to_human` helpers in Ruby on Rails. This vulnerability has been assigned the CVE identifier CVE-2014-0081.\n\nVersions Affected:  All.\nFixed Versions:     4.1.0.beta2, 4.0.3, 3.2.17.\n\nImpact\n------\nThese helpers allows users to nicely format a numeric value. Some of the parameters to the helper (format, negative_format and units) are not escaped correctly. Applications which pass user controlled data as one of these parameters are vulnerable to an XSS attack.\n\nAll users passing user controlled data to these parameters of the number helpers should either upgrade or use one of the workarounds immediately.\n\nReleases\n--------\nThe 4.1.0.rc1, 4.0.3 and 3.2.17 releases are available at the normal locations.\n\nWorkarounds\n-----------\n\nThe workaround for this issue is to escape the value passed to the parameter.\nFor example, replace code like this:\n\n```ruby\n\u003c%= number_to_currency(1.02, format: params[:format]) %\u003e\n```\n\nWith code like this\n\n```ruby\n\u003c%= number_to_currency(1.02, format: h(params[:format])) %\u003e\n```\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 4-1-beta-number_helpers_xss.patch - Patch for 4.1-beta series\n* 4-0-number_helpers_xss.patch - Patch for 4.0 series\n* 3-2-number_helpers_xss.patch - Patch for 3.2 series\n\nPlease note that only the 4.0.x and 3.2.x series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n\nCredits\n-------\n\nThanks to Kevin Reintjes for reporting the issue to us.\n\n-- \nAaron Patterson\nhttp://tenderlovemaking.com/\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2014-0081","http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html","http://openwall.com/lists/oss-security/2014/02/18/8","http://rhn.redhat.com/errata/RHSA-2014-0215.html","http://rhn.redhat.com/errata/RHSA-2014-0306.html","https://web.archive.org/web/20140911141416/http://www.securitytracker.com/id/1029782","https://web.archive.org/web/20170307202606/http://www.securityfocus.com/bid/65647","https://github.com/rails/rails/commit/08d0a11a3f62718d601d39e617c834759cf59bbb","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-0081.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails/CVE-2014-0081.yml","https://web.archive.org/web/20201207045136/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/tfp6gZCtzr4/j8LUHmu7fIEJ","https://github.com/advisories/GHSA-m46p-ggm5-5j83"],"source_kind":"github","identifiers":["GHSA-m46p-ggm5-5j83","CVE-2014-0081"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:13:38.839Z","updated_at":"2026-10-29T08:18:59.304Z","epss_percentage":0.04032,"epss_percentile":0.90501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00NnAtZ2dtNS01ajgz","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00NnAtZ2dtNS01ajgz","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.0.3","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.3"},{"first_patched_version":"3.2.17","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.17"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]},{"ecosystem":"rubygems","package_name":"rails","versions":[{"first_patched_version":"4.0.3","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.3"},{"first_patched_version":"3.2.17","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.17"}],"purl":"pkg:gem/rails","statistics":{"dependent_packages_count":13628,"dependent_repos_count":908495,"downloads":808033904,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2"],"unaffected_versions":["0.8.0","0.8.5","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.4.1","0.9.5","0.10.0","0.10.1","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.14.1","0.14.2","0.14.3","0.14.4","1.0.0","1.1.0","1.1.1","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW00NnAtZ2dtNS01ajgz/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdjZ3AtYzNnNy1xdnJ3","url":"https://github.com/advisories/GHSA-7cgp-c3g7-qvrw","title":"actionpack Improper Input Validation vulnerability","description":"`actionpack/lib/action_view/template/text.rb` in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the `:text` option to the `render` method, which allows remote attackers to cause a denial of service (memory consumption) by including these strings in headers.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2014-0082","http://lists.opensuse.org/opensuse-updates/2014-02/msg00081.html","http://openwall.com/lists/oss-security/2014/02/18/10","http://rhn.redhat.com/errata/RHSA-2014-0215.html","http://rhn.redhat.com/errata/RHSA-2014-0306.html","http://www.getchef.com/blog/2014/04/09/enterprise-chef-11-1-3-release/","https://web.archive.org/web/20201207044540/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/LMxO_3_eCuc/ozGBEhKaJbIJ","https://web.archive.org/web/20220315115444/https://puppet.com/security/cve/cve-2014-0082","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-0082.yml","https://github.com/advisories/GHSA-7cgp-c3g7-qvrw"],"source_kind":"github","identifiers":["GHSA-7cgp-c3g7-qvrw","CVE-2014-0082"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.848Z","updated_at":"2026-10-29T08:18:59.305Z","epss_percentage":0.06193,"epss_percentile":0.92594,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdjZ3AtYzNnNy1xdnJ3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdjZ3AtYzNnNy1xdnJ3","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.2.17","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.17"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdjZ3AtYzNnNy1xdnJ3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4ODUtajVqMi0yN2p4","url":"https://github.com/advisories/GHSA-6x85-j5j2-27jx","title":"actionpack Path Traversal vulnerability","description":"Directory traversal vulnerability in `actionpack/lib/abstract_controller/base.rb` in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2014-0130","http://rhn.redhat.com/errata/RHSA-2014-1863.html","https://web.archive.org/web/20140518192004/http://www.securityfocus.com/bid/67244","https://web.archive.org/web/20210411041816/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/NkKc7vTW70o/NxW_PDBSG3AJ","https://access.redhat.com/errata/RHSA-2014:0510","https://access.redhat.com/errata/RHSA-2014:0816","https://access.redhat.com/errata/RHSA-2014:1863","https://access.redhat.com/security/cve/CVE-2014-0130","https://bugzilla.redhat.com/show_bug.cgi?id=1095105","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-0130.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/NkKc7vTW70o","https://web.archive.org/web/20150319054505/http://matasano.com/research/AnatomyOfRailsVuln-CVE-2014-0130.pdf","https://groups.google.com/forum/message/raw?msg=rubyonrails-security/NkKc7vTW70o/NxW_PDBSG3AJ","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0130","http://matasano.com/research/AnatomyOfRailsVuln-CVE-2014-0130.pdf","https://github.com/advisories/GHSA-6x85-j5j2-27jx"],"source_kind":"github","identifiers":["GHSA-6x85-j5j2-27jx","CVE-2014-0130"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.858Z","updated_at":"2026-10-29T08:18:59.306Z","epss_percentage":0.53703,"epss_percentile":0.98864,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4ODUtajVqMi0yN2p4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4ODUtajVqMi0yN2p4","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.1.1","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.1.1"},{"first_patched_version":"4.0.5","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.5"},{"first_patched_version":"3.2.18","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.18"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.1.0"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4ODUtajVqMi0yN2p4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoNXEtOTZocC05amdt","url":"https://github.com/advisories/GHSA-6h5q-96hp-9jgm","title":"actionpack vulnerable to Cross-site Scripting","description":"Cross-site scripting (XSS) vulnerability in the `number_to_currency` helper in `actionpack/lib/action_view/helpers/number_helper.rb` in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the unit parameter.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-6415","https://github.com/advisories/GHSA-6h5q-96hp-9jgm","http://rhn.redhat.com/errata/RHSA-2013-1794.html","http://rhn.redhat.com/errata/RHSA-2014-0008.html","http://rhn.redhat.com/errata/RHSA-2014-1863.html","http://weblog.rubyonrails.org/2013/12/3/Rails_3_2_16_and_4_0_2_have_been_released/","http://www.debian.org/security/2014/dsa-2888","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2013-6415.yml","https://groups.google.com/forum/#!topic/ruby-security-ann/9WiRn2nhfq0","https://groups.google.com/forum/message/raw?msg=ruby-security-ann/9WiRn2nhfq0/2K2KRB4LwCMJ","https://puppet.com/security/cve/cve-2013-6415","https://web.archive.org/web/20131206180005/http://www.securityfocus.com/bid/64077","http://lists.opensuse.org/opensuse-updates/2013-12/msg00079.html","http://lists.opensuse.org/opensuse-updates/2013-12/msg00080.html","http://lists.opensuse.org/opensuse-updates/2013-12/msg00081.html","http://lists.opensuse.org/opensuse-updates/2013-12/msg00082.html","http://lists.opensuse.org/opensuse-updates/2014-01/msg00003.html","http://lists.opensuse.org/opensuse-updates/2014-01/msg00013.html"],"source_kind":"github","identifiers":["GHSA-6h5q-96hp-9jgm","CVE-2013-6415"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:38.712Z","updated_at":"2026-09-30T09:14:39.885Z","epss_percentage":0.03171,"epss_percentile":0.8751,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoNXEtOTZocC05amdt","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoNXEtOTZocC05amdt","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.0.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.2"},{"first_patched_version":"3.2.16","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.16"}],"purl":"pkg:gem/actionpack"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoNXEtOTZocC05amdt/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI5Z3ItdzU3Zi1ycGZ3","url":"https://github.com/advisories/GHSA-29gr-w57f-rpfw","title":"actionpack vulnerable to Path Traversal","description":"Directory traversal vulnerability in `actionpack/lib/action_dispatch/middleware/static.rb` in Action Pack in Ruby on Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4.2.0.beta3, when `serve_static_assets` is enabled, allows remote attackers to determine the existence of files outside the application root via a `/..%2F` sequence.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2014-7818","https://github.com/advisories/GHSA-29gr-w57f-rpfw","https://groups.google.com/forum/message/raw?msg=rubyonrails-security/dCp7duBiQgo/v_R_8PFs5IwJ","https://puppet.com/security/cve/cve-2014-7829","http://lists.opensuse.org/opensuse-updates/2014-11/msg00112.html","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2014-7818.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/dCp7duBiQgo"],"source_kind":"github","identifiers":["GHSA-29gr-w57f-rpfw","CVE-2014-7818"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:39.018Z","updated_at":"2026-10-29T08:14:08.206Z","epss_percentage":0.03457,"epss_percentile":0.88509,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI5Z3ItdzU3Zi1ycGZ3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI5Z3ItdzU3Zi1ycGZ3","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.2.0.beta3","vulnerable_version_range":"\u003e= 4.2.0.beta1, \u003c 4.2.0.beta3"},{"first_patched_version":"4.1.7","vulnerable_version_range":"\u003e= 4.1.0, \u003c 4.1.7"},{"first_patched_version":"4.0.11","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.0.11"},{"first_patched_version":"3.2.20","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.20"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11.1","4.1.0","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7.1","4.2.0.beta1","4.2.0.beta2"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.20","3.2.21","3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.0.11","4.0.12","4.0.13","4.0.13.rc1","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.7","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI5Z3ItdzU3Zi1ycGZ3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZmcHYtYzRobS0zeDZ2","url":"https://github.com/advisories/GHSA-ffpv-c4hm-3x6v","title":"actionpack is vulnerable to denial of service via a crafted HTTP Accept header","description":"actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly restrict use of the MIME type cache, which allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP Accept header.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2017-10-24T18:33:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2016-0751","https://groups.google.com/forum/message/raw?msg=ruby-security-ann/9oLY_FCzvoc/5CDXbvpYEgAJ","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178043.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178067.html","http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html","http://rhn.redhat.com/errata/RHSA-2016-0296.html","http://www.debian.org/security/2016/dsa-3464","http://www.openwall.com/lists/oss-security/2016/01/25/9","https://github.com/rails/rails/commit/127967b735813cd4f263df7a50426d74e7e9cc17","https://github.com/rails/rails/commit/221937c8ba1d291430ceddebbd4bdef7d3cb47d6","https://github.com/rails/rails/commit/37047b779a177b911c7161052cfc34a30e1db0af","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-0751.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/9oLY_FCzvoc","https://web.archive.org/web/20160128201702/http://www.securitytracker.com/id/1034816","https://web.archive.org/web/20200227181647/http://www.securityfocus.com/bid/81800","https://github.com/advisories/GHSA-ffpv-c4hm-3x6v"],"source_kind":"github","identifiers":["GHSA-ffpv-c4hm-3x6v","CVE-2016-0751"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.297Z","updated_at":"2026-10-29T08:17:36.788Z","epss_percentage":0.09731,"epss_percentile":0.95501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZmcHYtYzRobS0zeDZ2","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZmcHYtYzRobS0zeDZ2","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.1.14.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.0"},{"first_patched_version":"3.2.22.1","vulnerable_version_range":"\u003c= 3.2.22.0"},{"first_patched_version":"4.2.5.1","vulnerable_version_range":"\u003e= 4.2.0, \u003c= 4.2.5.0"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.2.0","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1"],"unaffected_versions":["3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWZmcHYtYzRobS0zeDZ2/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhycjQtcDZmcS1oamc3","url":"https://github.com/advisories/GHSA-xrr4-p6fq-hjg7","title":"Directory traversal vulnerability in Action View in Ruby on Rails","description":"Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a `..` (dot dot) in a pathname.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2017-10-24T18:33:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2016-0752","https://github.com/advisories/GHSA-xrr4-p6fq-hjg7","http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html","http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html","http://rhn.redhat.com/errata/RHSA-2016-0296.html","http://www.debian.org/security/2016/dsa-3464","http://www.openwall.com/lists/oss-security/2016/01/25/13","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-0752.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2016-0752.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/335P1DcLG00","https://web.archive.org/web/20210618005620/https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJ","https://web.archive.org/web/20210621170450/http://www.securityfocus.com/bid/81801","https://web.archive.org/web/20210723192420/http://www.securitytracker.com/id/1034816","https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJ","https://www.exploit-db.com/exploits/40561","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.html","http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.html","http://www.securityfocus.com/bid/81801","http://www.securitytracker.com/id/1034816","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-0752"],"source_kind":"github","identifiers":["GHSA-xrr4-p6fq-hjg7","CVE-2016-0752"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:12:59.630Z","updated_at":"2026-10-29T08:17:36.800Z","epss_percentage":0.95537,"epss_percentile":0.9986,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhycjQtcDZmcS1oamc3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhycjQtcDZmcS1oamc3","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"3.2.22.1","vulnerable_version_range":"\u003c 3.2.22.1"},{"first_patched_version":"4.2.5.1","vulnerable_version_range":"\u003e= 4.2.0, \u003c= 4.2.5.0"},{"first_patched_version":"4.1.14.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.0"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.2.0","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1"],"unaffected_versions":["3.2.22","3.2.22.1","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]},{"ecosystem":"rubygems","package_name":"actionview","versions":[{"first_patched_version":"4.2.5.1","vulnerable_version_range":"\u003e= 4.2.0, \u003c= 4.2.5.0"},{"first_patched_version":"4.1.14.1","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.0"}],"purl":"pkg:gem/actionview","statistics":{"dependent_packages_count":369,"dependent_repos_count":601072,"downloads":797467353,"downloads_period":"total"},"affected_versions":["4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.2.0","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1"],"unaffected_versions":["4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.9","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhycjQtcDZmcS1oamc3/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ4OWotNDZyaC1mcXI4","url":"https://github.com/advisories/GHSA-vx9j-46rh-fqr8","title":"actionview contains Path Traversal vulnerability","description":"There is a possible directory traversal and information leak vulnerability in Action View. This was meant to be fixed on CVE-2016-0752. However the 3.2 patch was not covering all possible scenarios. This vulnerability has been assigned the CVE identifier CVE-2016-2097.\n\nVersions Affected:  3.2.x, 4.0.x, 4.1.x\nNot affected:       4.2+\nFixed Versions:     3.2.22.2, 4.1.14.2\n\nImpact\n------\nApplications that pass unverified user input to the `render` method in a controller may be vulnerable to an information leak vulnerability.\n\nImpacted code will look something like this:\n\n```ruby\ndef index\n  render params[:id]\nend\n```\n\nCarefully crafted requests can cause the above code to render files from unexpected places like outside the application's view directory, and can possibly escalate this to a remote code execution attack.\n\nAll users running an affected release should either upgrade or use one of the workarounds immediately.\n\nReleases\n--------\nThe FIXED releases are available at the normal locations.\n\nWorkarounds\n-----------\nA workaround to this issue is to not pass arbitrary user input to the `render` method. Instead, verify that data before passing it to the `render` method.\n\nFor example, change this:\n\n```ruby\ndef index\n  render params[:id]\nend\n```\n\nTo this:\n\n```ruby\ndef index\n  render verify_template(params[:id])\nend\n\nprivate\ndef verify_template(name)\n  # add verification logic particular to your application here\nend\n```\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for it. It is in git-am format and consist of a single changeset.\n\n* 3-2-render_data_leak_2.patch - Patch for 3.2 series\n* 4-1-render_data_leak_2.patch - Patch for 4.1 series\n\nCredits\n-------\nThanks to both Jyoti Singh and Tobias Kraze from makandra for reporting this and working with us in the patch!","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2017-10-24T18:33:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2016-2097","http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html","http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html","http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html","http://weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released/","http://www.debian.org/security/2016/dsa-3509","https://web.archive.org/web/20160322002234/http://www.securitytracker.com/id/1035122","https://web.archive.org/web/20200228015320/http://www.securityfocus.com/bid/83726","https://github.com/rails/rails/commit/8a1d3ea617ffb0c8ae8467fa439bf63a3bfc4324","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-2097.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2016-2097.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/ddY6HgqB2z4","https://web.archive.org/web/20201221115217/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ","https://github.com/advisories/GHSA-vx9j-46rh-fqr8"],"source_kind":"github","identifiers":["GHSA-vx9j-46rh-fqr8","CVE-2016-2097"],"repository_url":"https://github.com/rails/rails","blast_radius":0.0,"created_at":"2022-12-21T16:12:59.558Z","updated_at":"2026-10-29T08:17:36.797Z","epss_percentage":0.04423,"epss_percentile":0.9092,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ4OWotNDZyaC1mcXI4","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ4OWotNDZyaC1mcXI4","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.1.14.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.1"},{"first_patched_version":"3.2.22.2","vulnerable_version_range":"\u003e= 3.0.0, \u003c= 3.2.22.1"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22.1","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.22","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.1.14","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]},{"ecosystem":"rubygems","package_name":"actionview","versions":[{"first_patched_version":"4.1.14.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.1"},{"first_patched_version":"3.2.22.2","vulnerable_version_range":"\u003e= 3.0.0, \u003c= 3.2.22.1"}],"purl":"pkg:gem/actionview","statistics":{"dependent_packages_count":369,"dependent_repos_count":601072,"downloads":797467353,"downloads_period":"total"},"affected_versions":["4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14.1"],"unaffected_versions":["4.1.14","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.9","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZ4OWotNDZyaC1mcXI4/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc4cmMtOGMyOS1wNDVn","url":"https://github.com/advisories/GHSA-78rc-8c29-p45g","title":"actionpack allows remote code execution via application's unrestricted use of render method","description":"Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2017-10-24T18:33:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2016-2098","https://www.exploit-db.com/exploits/40086/","http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00057.html","http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html","http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html","http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00086.html","http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html","http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html","http://weblog.rubyonrails.org/2016/2/29/Rails-4-2-5-2-4-1-14-2-3-2-22-2-have-been-released/","http://www.debian.org/security/2016/dsa-3509","https://web.archive.org/web/20200228015318/http://www.securityfocus.com/bid/83725","https://web.archive.org/web/20210612214217/https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ","https://web.archive.org/web/20211205173437/https://securitytracker.com/id/1035122","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2016-2098.yml","https://groups.google.com/forum/#!topic/rubyonrails-security/ly-IH-fxr_Q","https://github.com/advisories/GHSA-78rc-8c29-p45g"],"source_kind":"github","identifiers":["GHSA-78rc-8c29-p45g","CVE-2016-2098"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:12:59.185Z","updated_at":"2026-10-29T08:17:36.783Z","epss_percentage":0.81445,"epss_percentile":0.99622,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc4cmMtOGMyOS1wNDVn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc4cmMtOGMyOS1wNDVn","packages":[{"ecosystem":"rubygems","package_name":"actionpack","versions":[{"first_patched_version":"4.2.5.2","vulnerable_version_range":"\u003e= 4.2.0, \u003c= 4.2.5.1"},{"first_patched_version":"4.1.14.2","vulnerable_version_range":"\u003e= 4.0.0, \u003c= 4.1.14.1"},{"first_patched_version":"3.2.22.2","vulnerable_version_range":"\u003e= 3.0.0, \u003c= 3.2.22.1"}],"purl":"pkg:gem/actionpack","statistics":{"dependent_packages_count":1688,"dependent_repos_count":876080,"downloads":846243800,"downloads_period":"total"},"affected_versions":["3.0.0","3.0.1","3.0.2","3.0.3","3.0.4","3.0.4.rc1","3.0.5","3.0.5.rc1","3.0.6","3.0.6.rc1","3.0.6.rc2","3.0.7","3.0.7.rc1","3.0.7.rc2","3.0.8","3.0.8.rc1","3.0.8.rc2","3.0.8.rc4","3.0.9","3.0.9.rc1","3.0.9.rc3","3.0.9.rc4","3.0.9.rc5","3.0.10","3.0.10.rc1","3.0.11","3.0.12","3.0.12.rc1","3.0.13","3.0.13.rc1","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.20","3.1.0","3.1.0.beta1","3.1.0.rc1","3.1.0.rc2","3.1.0.rc3","3.1.0.rc4","3.1.0.rc5","3.1.0.rc6","3.1.0.rc8","3.1.1","3.1.1.rc1","3.1.1.rc2","3.1.1.rc3","3.1.2","3.1.2.rc1","3.1.2.rc2","3.1.3","3.1.4","3.1.4.rc1","3.1.5","3.1.5.rc1","3.1.6","3.1.7","3.1.8","3.1.9","3.1.10","3.1.11","3.1.12","3.2.0","3.2.0.rc1","3.2.0.rc2","3.2.1","3.2.2","3.2.2.rc1","3.2.3","3.2.3.rc1","3.2.3.rc2","3.2.4","3.2.4.rc1","3.2.5","3.2.6","3.2.7","3.2.7.rc1","3.2.8","3.2.8.rc1","3.2.8.rc2","3.2.9","3.2.9.rc1","3.2.9.rc2","3.2.9.rc3","3.2.10","3.2.11","3.2.12","3.2.13","3.2.13.rc1","3.2.13.rc2","3.2.14","3.2.14.rc1","3.2.14.rc2","3.2.15","3.2.15.rc1","3.2.15.rc2","3.2.15.rc3","3.2.16","3.2.17","3.2.18","3.2.19","3.2.20","3.2.21","3.2.22.1","4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14.1","4.2.0","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5.1"],"unaffected_versions":["0.9.0","0.9.5","1.0.0","1.0.1","1.1.0","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.5.1","1.6.0","1.7.0","1.8.0","1.8.1","1.9.0","1.9.1","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.12.0","1.12.1","1.12.2","1.12.3","1.12.4","1.12.5","1.13.0","1.13.1","1.13.2","1.13.3","1.13.4","1.13.5","1.13.6","2.0.0","2.0.1","2.0.2","2.0.4","2.0.5","2.1.0","2.1.1","2.1.2","2.2.2","2.2.3","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.8.pre1","2.3.9","2.3.9.pre","2.3.10","2.3.11","2.3.12","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","3.0.0.beta","3.0.0.beta2","3.0.0.beta3","3.0.0.beta4","3.0.0.rc","3.0.0.rc2","3.2.22","3.2.22.2","3.2.22.3","3.2.22.4","3.2.22.5","4.0.0.beta1","4.0.0.rc1","4.0.0.rc2","4.1.14","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.5","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.6","5.2.4.rc1","5.2.5","5.2.6","5.2.6.1","5.2.6.2","5.2.6.3","5.2.7","5.2.7.1","5.2.8","5.2.8.1","6.0.0","6.0.0.beta1","6.0.0.beta2","6.0.0.beta3","6.0.0.rc1","6.0.0.rc2","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.7","6.0.3.rc1","6.0.4","6.0.4.1","6.0.4.2","6.0.4.3","6.0.4.4","6.0.4.5","6.0.4.6","6.0.4.7","6.0.4.8","6.0.5","6.0.5.1","6.0.6","6.0.6.1","6.1.0","6.1.0.rc1","6.1.0.rc2","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1","6.1.3.2","6.1.4","6.1.4.1","6.1.4.2","6.1.4.3","6.1.4.4","6.1.4.5","6.1.4.6","6.1.4.7","6.1.5","6.1.5.1","6.1.6","6.1.6.1","6.1.7","6.1.7.1","6.1.7.2","6.1.7.3","6.1.7.4","6.1.7.5","6.1.7.6","6.1.7.7","6.1.7.8","6.1.7.9","6.1.7.10","7.0.0","7.0.0.alpha1","7.0.0.alpha2","7.0.0.rc1","7.0.0.rc2","7.0.0.rc3","7.0.1","7.0.2","7.0.2.1","7.0.2.2","7.0.2.3","7.0.2.4","7.0.3","7.0.3.1","7.0.4","7.0.4.1","7.0.4.2","7.0.4.3","7.0.5","7.0.5.1","7.0.6","7.0.7","7.0.7.1","7.0.7.2","7.0.8","7.0.8.1","7.0.8.2","7.0.8.3","7.0.8.4","7.0.8.5","7.0.8.6","7.0.8.7","7.0.10","7.1.0","7.1.0.beta1","7.1.0.rc1","7.1.0.rc2","7.1.1","7.1.2","7.1.3","7.1.3.1","7.1.3.2","7.1.3.3","7.1.3.4","7.1.4","7.1.4.1","7.1.4.2","7.1.5","7.1.5.1","7.1.5.2","7.1.6","7.2.0","7.2.0.beta1","7.2.0.beta2","7.2.0.beta3","7.2.0.rc1","7.2.1","7.2.1.1","7.2.1.2","7.2.2","7.2.2.1","7.2.2.2","7.2.3","7.2.3.1","7.2.3.2","7.2.4","8.0.0","8.0.0.1","8.0.0.beta1","8.0.0.rc1","8.0.0.rc2","8.0.1","8.0.2","8.0.2.1","8.0.3","8.0.4","8.0.4.1","8.0.5","8.0.5.1","8.1.0","8.1.0.beta1","8.1.0.rc1","8.1.1","8.1.2","8.1.2.1","8.1.3","8.1.3.1","8.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTc4cmMtOGMyOS1wNDVn/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/rubygems/actionpack","docker_dependents_count":1348,"docker_downloads_count":824839457,"usage_url":"https://repos.ecosyste.ms/usage/rubygems/actionpack","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/rubygems/actionpack/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-10-28T08:24:33.421Z","issues_count":18726,"pull_requests_count":43045,"avg_time_to_close_issue":7210698.593145051,"avg_time_to_close_pull_request":4636830.157199698,"issues_closed_count":18235,"pull_requests_closed_count":40967,"pull_request_authors_count":7748,"issue_authors_count":9916,"avg_comments_per_issue":5.171099006728612,"avg_comments_per_pull_request":2.936694157277268,"merged_pull_requests_count":28960,"bot_issues_count":2,"bot_pull_requests_count":5,"past_year_issues_count":425,"past_year_pull_requests_count":2821,"past_year_avg_time_to_close_issue":2916712.2724719103,"past_year_avg_time_to_close_pull_request":934828.9893522627,"past_year_issues_closed_count":356,"past_year_pull_requests_closed_count":2254,"past_year_pull_request_authors_count":675,"past_year_issue_authors_count":325,"past_year_avg_comments_per_issue":1.9929411764705882,"past_year_avg_comments_per_pull_request":0.9517901453385325,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1794,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/rails%2Frails/issues","maintainers":[{"login":"kamipo","count":1308,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kamipo"},{"login":"yahonda","count":825,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yahonda"},{"login":"y-yagi","count":790,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/y-yagi"},{"login":"zzak","count":692,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zzak"},{"login":"p8","count":664,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/p8"},{"login":"fatkodima","count":587,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/fatkodima"},{"login":"skipkayhil","count":561,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/skipkayhil"},{"login":"jonathanhefner","count":508,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonathanhefner"},{"login":"arunagw","count":480,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arunagw"},{"login":"byroot","count":412,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byroot"},{"login":"vipulnsward","count":407,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vipulnsward"},{"login":"eileencodes","count":384,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eileencodes"},{"login":"prathamesh-sonpatki","count":381,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/prathamesh-sonpatki"},{"login":"dhh","count":343,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dhh"},{"login":"ghiculescu","count":331,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ghiculescu"},{"login":"gmcgibbon","count":302,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gmcgibbon"},{"login":"rafaelfranca","count":280,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rafaelfranca"},{"login":"Edouard-chin","count":257,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Edouard-chin"},{"login":"jhawthorn","count":246,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jhawthorn"},{"login":"senny","count":232,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/senny"},{"login":"claudiob","count":215,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/claudiob"},{"login":"guilleiguaran","count":209,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/guilleiguaran"},{"login":"matthewd","count":204,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/matthewd"},{"login":"schneems","count":199,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/schneems"},{"login":"amatsuda","count":177,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amatsuda"},{"login":"akhilgkrishnan","count":176,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akhilgkrishnan"},{"login":"sikachu","count":158,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sikachu"},{"login":"tenderlove","count":151,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tenderlove"},{"login":"fxn","count":150,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/fxn"},{"login":"eugeneius","count":149,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eugeneius"},{"login":"kirs","count":148,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kirs"},{"login":"flavorjones","count":139,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/flavorjones"},{"login":"arthurnn","count":133,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arthurnn"},{"login":"chancancode","count":113,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chancancode"},{"login":"morgoth","count":109,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/morgoth"},{"login":"robin850","count":107,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/robin850"},{"login":"AIndrewn617","count":102,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AIndrewn617"},{"login":"jeremy","count":96,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jeremy"},{"login":"carlosantoniodasilva","count":95,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/carlosantoniodasilva"},{"login":"composerinteralia","count":72,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/composerinteralia"},{"login":"steveklabnik","count":68,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/steveklabnik"},{"login":"seuros","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/seuros"},{"login":"alexcameron89","count":51,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexcameron89"},{"login":"repinel","count":49,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/repinel"},{"login":"gregmolnar","count":46,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gregmolnar"},{"login":"vijaydev","count":46,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vijaydev"},{"login":"seejohnrun","count":38,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/seejohnrun"},{"login":"rosa","count":37,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rosa"},{"login":"lukaszx0","count":34,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukaszx0"},{"login":"drogus","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/drogus"},{"login":"cristianbica","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cristianbica"},{"login":"siaw23","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/siaw23"},{"login":"jonleighton","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jonleighton"},{"login":"indirect","count":12,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/indirect"},{"login":"rossta","count":12,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rossta"},{"login":"guillaumebriday","count":12,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/guillaumebriday"},{"login":"todd","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/todd"},{"login":"andyatkinson","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/andyatkinson"},{"login":"lifo","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lifo"},{"login":"luanzeba","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luanzeba"},{"login":"bouk","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bouk"},{"login":"keeran","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/keeran"},{"login":"NZKoz","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/NZKoz"},{"login":"JangoSteve","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JangoSteve"},{"login":"pedrofurtado","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pedrofurtado"},{"login":"gauravtiwari","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gauravtiwari"},{"login":"andrewn617","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/andrewn617"},{"login":"robertbastian","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/robertbastian"},{"login":"nestermaks","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nestermaks"},{"login":"wycats","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wycats"},{"login":"jmyersmsft","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jmyersmsft"},{"login":"limespy","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/limespy"},{"login":"pierromond","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pierromond"}],"active_maintainers":[{"login":"yahonda","count":121,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yahonda"},{"login":"byroot","count":94,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/byroot"},{"login":"kamipo","count":79,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kamipo"},{"login":"gmcgibbon","count":46,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gmcgibbon"},{"login":"AIndrewn617","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AIndrewn617"},{"login":"p8","count":45,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/p8"},{"login":"zzak","count":44,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zzak"},{"login":"amatsuda","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/amatsuda"},{"login":"matthewd","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/matthewd"},{"login":"flavorjones","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/flavorjones"},{"login":"skipkayhil","count":33,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/skipkayhil"},{"login":"Edouard-chin","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/Edouard-chin"},{"login":"fxn","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/fxn"},{"login":"fatkodima","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/fatkodima"},{"login":"tenderlove","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tenderlove"},{"login":"seuros","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/seuros"},{"login":"morgoth","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/morgoth"},{"login":"jeremy","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jeremy"},{"login":"rosa","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rosa"},{"login":"kirs","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kirs"},{"login":"jhawthorn","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jhawthorn"},{"login":"akhilgkrishnan","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/akhilgkrishnan"},{"login":"rafaelfranca","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rafaelfranca"},{"login":"eileencodes","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eileencodes"},{"login":"dhh","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dhh"},{"login":"claudiob","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/claudiob"},{"login":"guilleiguaran","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/guilleiguaran"},{"login":"guillaumebriday","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/guillaumebriday"},{"login":"gregmolnar","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gregmolnar"},{"login":"schneems","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/schneems"},{"login":"siaw23","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/siaw23"},{"login":"ghiculescu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ghiculescu"},{"login":"y-yagi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/y-yagi"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/packages/actionpack/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/packages/actionpack/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/packages/actionpack/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/packages/actionpack/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/packages/actionpack/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/packages/actionpack/codemeta","maintainers":[{"uuid":"43492","login":"jhawthorn","name":null,"email":null,"url":null,"packages_count":154,"html_url":"https://rubygems.org/profiles/jhawthorn","role":null,"created_at":"2022-11-07T12:33:28.725Z","updated_at":"2022-11-07T12:33:28.725Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/jhawthorn/packages"},{"uuid":"207","login":"tenderlove","name":null,"email":null,"url":null,"packages_count":190,"html_url":"https://rubygems.org/profiles/tenderlove","role":null,"created_at":"2022-11-07T12:33:28.755Z","updated_at":"2022-11-07T12:33:28.755Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/tenderlove/packages"},{"uuid":"54617","login":"kamipo","name":null,"email":null,"url":null,"packages_count":61,"html_url":"https://rubygems.org/profiles/kamipo","role":null,"created_at":"2022-11-07T12:33:28.720Z","updated_at":"2022-11-07T12:33:28.720Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/kamipo/packages"},{"uuid":"46413","login":"byroot","name":null,"email":null,"url":null,"packages_count":105,"html_url":"https://rubygems.org/profiles/byroot","role":null,"created_at":"2022-11-07T12:33:28.733Z","updated_at":"2022-11-07T12:33:28.733Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/byroot/packages"},{"uuid":"43998","login":"guilleiguaran","name":null,"email":null,"url":null,"packages_count":85,"html_url":"https://rubygems.org/profiles/guilleiguaran","role":null,"created_at":"2022-11-07T12:33:28.760Z","updated_at":"2022-11-07T12:33:28.760Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/guilleiguaran/packages"},{"uuid":"32977","login":"fxn","name":null,"email":null,"url":null,"packages_count":62,"html_url":"https://rubygems.org/profiles/fxn","role":null,"created_at":"2022-11-07T12:33:28.750Z","updated_at":"2022-11-07T12:33:28.750Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/fxn/packages"},{"uuid":"429","login":"cantoniodasilva","name":null,"email":null,"url":null,"packages_count":66,"html_url":"https://rubygems.org/profiles/cantoniodasilva","role":null,"created_at":"2022-11-07T12:33:28.765Z","updated_at":"2022-11-07T12:33:28.765Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/cantoniodasilva/packages"},{"uuid":"47349","login":"rafaelfranca","name":null,"email":null,"url":null,"packages_count":120,"html_url":"https://rubygems.org/profiles/rafaelfranca","role":null,"created_at":"2022-11-07T12:33:28.772Z","updated_at":"2022-11-07T12:33:28.772Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/rafaelfranca/packages"},{"uuid":"528","login":"matthewd","name":null,"email":null,"url":null,"packages_count":66,"html_url":"https://rubygems.org/profiles/matthewd","role":null,"created_at":"2022-11-07T12:33:28.778Z","updated_at":"2022-11-07T12:33:28.778Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/matthewd/packages"},{"uuid":"96878","login":"eileencodes","name":null,"email":null,"url":null,"packages_count":54,"html_url":"https://rubygems.org/profiles/eileencodes","role":null,"created_at":"2022-11-07T12:33:28.785Z","updated_at":"2022-11-07T12:33:28.785Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/rubygems.org/maintainers/eileencodes/packages"}]}