Known vulnerabilities in activesupport

Vendor: Ruby
Software: activesupport
Software CPE: cpe:2.3:o:ruby:activesupport:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting activesupport activesupport is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28239 - Deserialization of Untrusted Data
CVE-2020-8165
CWE-502 High
Available
No
5.2.4.3, 6.0.3.1 26.05.2020 SB2020052601
SB2020092504
SB2020101701
and 2 more
#VU36781 - Improper input validation
CVE-2018-3779
CWE-20 High
No
No
- 10.08.2018 SB2018081023