An open index of dependabot pull requests across open source projects.

actionpack

Ecosystem:
rubygems
Package URL:
pkg:gem/actionpack
Total PRs:
241 Dependabot PRs
Latest PR:
3 months ago
Unique Repositories:
192 repositories
Unique Repos (30 days):
0 repositories
Security Advisories
Actionpack Open Redirect Vulnerability
GHSA-8877-prq4-9xfw CVE-2021-22881 MODERATE published over 5 years ago • updated about 11 hours ago
The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` head...
actionpack is vulnerable to remote bypass authentication
GHSA-p692-7mm3-3fxg CVE-2015-7576 LOW published over 8 years ago • updated about 11 hours ago
The http_basic_authenticate_with method in actionpack/lib/action_controller/metal/http_authentication.rb in the Basic Authentication implementation...
Possible ReDoS vulnerability in HTTP Token authentication in Action Controller
GHSA-vfg9-r3fq-jvx4 CVE-2024-47887 MODERATE published over 1 year ago • updated 8 days ago
There is a possible ReDoS vulnerability in Action Controller's HTTP Token authentication. This vulnerability has been assigned the CVE identifier C...
Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
GHSA-x76w-6vjr-8xgj CVE-2024-41128 MODERATE published over 1 year ago • updated 6 days ago
There is a possible ReDoS vulnerability in the query parameter filtering routines of Action Dispatch. This vulnerability has been assigned the CVE ...
Possible DoS Vulnerability in Action Controller Token Authentication
GHSA-7wjx-3g7j-8584 CVE-2021-22904 HIGH published about 5 years ago • updated about 11 hours ago
There is a possible DoS vulnerability in the Token Authentication logic in Action Controller. Versions Affected: >= 4.0.0 Not affected: < 4...
Recent PRs
Bump actionpack from 8.1.2 to 8.1.2.1

hackclub/forge #16

8.1.2 → 8.1.2.1
Closed 3 months ago 5 comments
hackclub
Bump actionpack from 8.1.2 to 8.1.2.1

isprambiente/Partecipo #171

8.1.2 → 8.1.2.1
Closed 3 months ago 2 comments
isprambiente
Bump actionpack from 8.1.2 to 8.1.2.1

bunnymatic/mau #584

8.1.2 → 8.1.2.1
Closed 3 months ago 2 comments
bunnymatic
Bump actionpack from 8.1.2 to 8.1.2.1

unasuke/chachat #172

8.1.2 → 8.1.2.1
Closed 3 months ago 1 comment
unasuke
Bump actionpack from 8.1.2 to 8.1.2.1

mockdeep/questlog #2660

8.1.2 → 8.1.2.1
Closed 3 months ago 1 comment
mockdeep
Bump actionpack from 8.1.2 to 8.1.2.1

katalyst/content #115

8.1.2 → 8.1.2.1
Closed 3 months ago 1 comment
katalyst
Bump actionpack from 8.1.2 to 8.1.2.1

ecosyste-ms/ruby #300

8.1.2 → 8.1.2.1
Closed 3 months ago 1 comment
ecosyste-ms
Bump actionpack from 8.1.1 to 8.1.2.1

qbwc/qbwc #166

8.1.1 → 8.1.2.1 Patch PR
Closed 3 months ago 1 comment
qbwc
Package Details
Name: actionpack
Ecosystem: rubygems
PURL Type: gem
Package URL: pkg:gem/actionpack
JSON API: View JSON
Security Advisories

59

Active advisories
HIGH 11
MODERATE 42
LOW 6
View All gem Advisories
Package Information
Description:

Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.

Repository: https://github.com/rails/rails
Homepage: https://rubyonrails.org
Latest Release: 8.0.2
over 1 year ago
Dependent Repos: 876,080
Dependent Packages: 1,688
Downloads: 655,515,484
Ranking: Top 0.0123% by dependent repos Top 0.0206% by downloads Top 0.0307% by dependent pkgs
PR Status
Open 87 (36.1%)
Merged 45 (18.7%)
Closed 96 (39.8%)
PR Types
Major 18 (7.5%)
Minor 7 (2.9%)
Patch 90 (37.3%)