.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

actionview 4.1.14.2 vulnerabilities

13 advisories known · actionview@4.1.14.2 · 8 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 4.1.14.2

SEVERITYADVISORYPUBLISHED

HighRemote code execution via user-provided local names in ActionViewGHSA-cr3x-7m39-c6jqBIT-rails-2020-8163CVE-2020-8163Affected <4.2.11.3Fixed in 4.2.11.3OSV source ↗6 years ago

HighPath Traversal in Action ViewGHSA-86g5-2wh3-gc9jCVE-2019-5418Affected >=4.0.0 <4.2.11.1, >=5.0.0 <5.0.7.2, >=5.1.0 <5.1.6.2, >=5.2.0 <5.2.2.1Fixed in 4.2.11.1 Fixed in 5.0.7.2 Fixed in 5.1.6.2 Fixed in 5.2.2.1OSV source ↗8 years ago

HighDenial of Service Vulnerability in Action ViewGHSA-m63j-wh5w-c252CVE-2019-5419Affected >=4.0.0 <4.2.11.1, >=5.0.0 <5.0.7.2, >=5.1.0 <5.1.6.2, >=5.2.0 <5.2.2.1, >=6.0.0.beta1 <6.0.0.beta3Fixed in 4.2.11.1 Fixed in 5.0.7.2 Fixed in 5.1.6.2 Fixed in 5.2.2.1 Fixed in 6.0.0.beta3OSV source ↗8 years ago

MediumXSS Vulnerability in Action View tag helpersGHSA-ch3h-j2vf-95pvCVE-2022-27777Affected <5.2.7.1, >=6.0.0 <6.0.4.8, >=6.1.0 <6.1.5.1, >=7.0.0 <7.0.2.4Fixed in 5.2.7.1 Fixed in 6.0.4.8 Fixed in 6.1.5.1 Fixed in 7.0.2.4OSV source ↗5 years ago

Mediumactionview Cross-site Scripting vulnerabilityGHSA-pc3m-v286-2jwjCVE-2016-6316Affected >=3.0.0 <3.2.22.3, >=4.0.0 <4.2.7.1, >=5.0.0 <5.0.0.1Fixed in 3.2.22.3 Fixed in 4.2.7.1 Fixed in 5.0.0.1OSV source ↗9 years ago

MediumXSS in Action ViewGHSA-cfjv-5498-mph5CVE-2020-15169Affected <5.2.4.4, >=6.0.0.0 <6.0.3.3Fixed in 5.2.4.4 Fixed in 6.0.3.3OSV source ↗6 years ago

MediumCross site scripting vulnerability in ActionViewGHSA-65cv-r6x7-79hvCVE-2020-5267Affected <5.2.4.2, >=6.0.0 <6.0.2.2Fixed in 5.2.4.2 Fixed in 6.0.2.2OSV source ↗7 years ago

LowRails has a possible XSS vulnerability in its Action View tag helpersGHSA-v55j-83pf-r9cqCVE-2026-33168Affected <7.2.3.1, >=8.0.0.beta1 <8.0.4.1, >=8.1.0.beta1 <8.1.2.1Fixed in 7.2.3.1 Fixed in 8.0.4.1 Fixed in 8.1.2.1OSV source ↗8 months ago

Does not affect 4.1.14.2

SEVERITYADVISORYPUBLISHED

HighDirectory traversal vulnerability in Action View in Ruby on RailsGHSA-xrr4-p6fq-hjg7CVE-2016-0752Affected >=4.0.0 <4.1.14.1, >=4.2.0 <4.2.5.1Fixed in 4.1.14.1 Fixed in 4.2.5.1OSV source ↗9 years ago

MediumCSRF Vulnerability in rails-ujsGHSA-xq5j-gw7f-jgj8CVE-2020-8167Affected >=5.0.0 <5.2.4.3, >=6.0.0 <6.0.3.1Fixed in 5.2.4.3 Fixed in 6.0.3.1OSV source ↗6 years ago

Mediumrails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML ElementsGHSA-xp5h-f8jf-rc8qCVE-2023-23913Affected >=5.1.0 <6.1.7.3, >=7.0.0 <7.0.4.3Fixed in 6.1.7.3 Fixed in 7.0.4.3OSV source ↗3 years ago

MediumRails actionpack gem vulnerable to Cross-site ScriptingGHSA-75w6-p6mg-vh8jCVE-2011-0446Affected <2.3.11, >=3.0.0 <3.0.4Fixed in 2.3.11 Fixed in 3.0.4OSV source ↗9 years ago

Mediumactionview contains Path Traversal vulnerabilityGHSA-vx9j-46rh-fqr8CVE-2016-2097Affected >=3.0.0 <3.2.22.2, >=4.0.0 <4.1.14.2Fixed in 3.2.22.2 Fixed in 4.1.14.2OSV source ↗9 years ago