Known vulnerabilities in rubygem-activestorage

Vendor: Fedoraproject
Software: rubygem-activestorage
Software CPE: cpe:2.3:o:fedoraproject:rubygem-activestorage:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rubygem-activestorage rubygem-activestorage is affected by 5 known vulnerabilities: 1 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124275 - Uncontrolled Memory Allocation
CVE-2026-33174		 CWE-789 Medium
No
No
 8.1.3.1-1.fc45 24.03.2026 SB2026032459
SB2026080548
#VU73274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28120		 CWE-79 Medium
No
No
 7.0.4.3-1.fc37, 7.0.4.3-1.fc38 14.03.2023 SB2023031410
SB2023041501
SB2023042648
and 13 more
#VU46724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15169		 CWE-79 Low
No
No
 6.0.3.3-1.fc33, 6.0.3.3-1.fc34 11.09.2020 SB2020091507
SB2020092504
SB2023042728
and 3 more
#VU29212 - Improper Authorization
CVE-2020-8185		 CWE-285 High
No
No
 6.0.3.3-1.fc33, 6.0.3.3-1.fc34 23.06.2020 SB2020062316
SB2020092525
SB20200930127
#VU26248 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5267		 CWE-79 Low
Available
No
 6.0.3.3-1.fc33, 6.0.3.3-1.fc34 20.03.2020 SB2020032004
SB2020051128
SB2020092525
and 1 more