https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T21:26:11.318173+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2012-1098 CVE-2012-1098 2026-10-01T21:26:11.320872+00:00

Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods.

 https://db.gcve.eu/vuln/ghsa-qv8p-v9qw-wc7g GHSA-qv8p-v9qw-wc7g — activesupport Cross-site Scripting vulnerability 2026-10-01T21:26:11.320971+00:00

Affected: RubyGems: activesupport

Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving a SafeBuffer object that is manipulated through certain methods.