https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T22:41:50.229079+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2012-3464 CVE-2012-3464 2026-09-29T22:41:50.232962+00:00

Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.

 https://vulnerability.circl.lu/vuln/ghsa-h835-75hw-pj89 GHSA-h835-75hw-pj89 — activesupport Cross-site Scripting vulnerability 2026-09-29T22:41:50.233044+00:00

Affected: RubyGems: activesupport

Cross-site scripting (XSS) vulnerability in `activesupport/lib/active_support/core_ext/string/output_safety.rb` in Ruby on Rails before 2.3.16, 3.0.x before , 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a ' (quote) character.