Known vulnerabilities in activestorage

Vendor: Ruby
Software: activestorage
Software CPE: cpe:2.3:a:ruby:activestorage:*:*:*:*:*:rubygems:*:*
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting activestorage activestorage is affected by 2 known vulnerabilities: 1 high, 1 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140820 - Insecure Default Initialization of Resource
CVE-2026-66066
CWE-1188 High
Available
Exploited
7.2.3.2, 8.0.5.1, 8.1.3.1 03.08.2026 SB2026080390
#VU28240 - Improper input validation
CVE-2020-8162
CWE-20 Medium
No
No
5.2.4.3, 6.0.3.1 26.05.2020 SB2020052602
SB2020092504
SB2021040774