An open index of dependabot pull requests across open source projects.

activerecord

Ecosystem:
rubygems
Package URL:
pkg:gem/activerecord
Total PRs:
1,385 Dependabot PRs
Latest PR:
6 days ago
Unique Repositories:
1,149 repositories
Unique Repos (30 days):
4 repositories
Security Advisories
Rails ActiveRecord gem vulnerable to SQL injection
GHSA-xf96-32q2-9rw2 CVE-2008-4094 HIGH published over 8 years ago • updated 1 day ago
Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) `:limit` ...
Active Record subject to Regular Expression Denial-of-Service (ReDoS)
GHSA-8hc4-xxm3-5ppp CVE-2021-22880 HIGH published almost 5 years ago • updated 1 day ago
The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability....
activerecord vulnerable to SQL Injection
GHSA-h6w6-xmqv-7q78 CVE-2011-2930 HIGH published over 8 years ago • updated 3 days ago
Multiple SQL injection vulnerabilities in the `quote_table_name` method in the ActiveRecord adapters in `activerecord/lib/active_record/connection_...
SQL Injection Vulnerability via ActiveRecord comments
GHSA-hq7p-j377-6v63 CVE-2023-22794 HIGH published about 3 years ago • updated 2 days ago
There is a possible vulnerability in ActiveRecord related to the sanitization of comments. This vulnerability has been assigned the CVE identifier ...
Active Record contains deserialization of arbitrary YAML
GHSA-fhj9-cjjh-27vm CVE-2013-0277 CRITICAL published over 8 years ago • updated 2 days ago
ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via...
Recent PRs (filtered by: Patch PRs )
Bump activerecord from 8.1.1 to 8.1.2

kp-forks/beef #388

8.1.1 → 8.1.2 Patch PR
Closed about 1 month ago 1 comment
kp-forks
Package Details
Name: activerecord
Ecosystem: rubygems
PURL Type: gem
Package URL: pkg:gem/activerecord
JSON API: View JSON
Security Advisories

23

Active advisories
CRITICAL 3
HIGH 12
MODERATE 8
View All gem Advisories
Package Information
Description:

Databases on Rails. Build a persistent domain model by mapping database tables to Ruby classes. Strong conventions for associations, validations, aggregations, migrations, and testing come baked-in.

Repository: https://github.com/rails/rails
Homepage: https://rubyonrails.org
Latest Release: 8.0.2
11 months ago
Dependent Repos: 907,371
Dependent Packages: 6,206
Downloads: 628,455,636
Ranking: Top 0.0095% by dependent repos Top 0.0195% by downloads Top 0.0089% by dependent pkgs
PR Status
Open 772 (55.7%)
Merged 273 (19.7%)
Closed 324 (23.4%)
PR Types
Minor 42 (3.0%)
Major 74 (5.3%)
Patch 215 (15.5%)