Rubyonrails Rails vulnerabilities
118 published vulnerabilities in Rubyonrails Rails, 3 of them exploited in the wild. The most were published in 2013 (16), and 9 so far in 2026.
Rubyonrails Rails vulnerabilities by year
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2026
Most exploited Rubyonrails Rails vulnerabilities
- CVE-2019-5418 Rails Ruby on Rails Path Traversal
- CVE-2016-0752 Ruby on Rails Directory Traversal
- CVE-2014-0130 Ruby on Rails Directory Traversal
- CVE-2013-0277 Active Record contains deserialization of arbitrary YAML
- CVE-2020-8165 ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore
- CVE-2019-5420 Use of Insufficiently Random Values in Railties Allows Remote Code Execution
- CVE-2020-8163 Remote code execution via user-provided local names in ActionView
- CVE-2017-17916 SQL injection in n/a
- CVE-2017-17917 SQL injection in n/a
- CVE-2026-33195 Rails Active Storage has possible Path Traversal in DiskService
- CVE-2022-23634 Information Exposure when using Puma with Rails
- CVE-2024-26142 Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.