{"api_version":"v1","generated_at":"2026-10-08T20:50:00+00:00","product":{"cve_count":14,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-rails-rails-499326b4f7c7","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/rails","name":"rails","next_cursor":null,"observations":[{"affected":"< 7.2.3.2; >= 8.0.0.beta1, < 8.0.5.1; >= 8.1.0.beta1, < 8.1.3.1","affected_versions_present":true,"cve_id":"CVE-2026-66066","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-66066","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-05T13:46:21.375Z","patch_url":"https://www.cyber.gc.ca/en/alerts-advisories/rails-security-advisory-av26-767","primary_source":"","published":"2026-07-30T18:32:11.419Z"},{"affected":">= 0, < 7.1.5.2; >= 7.2, < 7.2.2.2; >= 8.0, < 8.0.2.1","affected_versions_present":true,"cve_id":"CVE-2025-55193","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-55193","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-08-14T14:51:11.284Z","patch_url":"","primary_source":"","published":"2025-08-13T22:41:41.890Z"},{"affected":">= 5.2.0, < 7.0.8.7; >= 7.1.0, < 7.1.5.1; >= 7.2.0, < 7.2.2.1; >= 8.0.0, < 8.0.0.1","affected_versions_present":true,"cve_id":"CVE-2024-54133","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-54133","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-07T00:10:45.315Z","patch_url":"","primary_source":"","published":"2024-12-10T22:52:04.633Z"},{"affected":">= 3.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1","affected_versions_present":true,"cve_id":"CVE-2024-47889","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47889","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-17T16:31:00.794Z","patch_url":"","primary_source":"","published":"2024-10-16T20:55:33.958Z"},{"affected":">= 6.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1","affected_versions_present":true,"cve_id":"CVE-2024-47888","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47888","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-16T20:52:22.728Z","patch_url":"","primary_source":"","published":"2024-10-16T20:31:06.037Z"},{"affected":">= 4.0.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1","affected_versions_present":true,"cve_id":"CVE-2024-47887","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47887","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-17T16:36:00.367Z","patch_url":"","primary_source":"","published":"2024-10-16T20:02:34.722Z"},{"affected":">= 3.1.0, < 6.1.7.9; >= 7.0.0, < 7.0.8.5; >= 7.1.0, < 7.1.4.1; >= 7.2.0, < 7.2.1.1","affected_versions_present":true,"cve_id":"CVE-2024-41128","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-41128","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-17T17:11:51.031Z","patch_url":"","primary_source":"","published":"2024-10-16T18:04:42.501Z"},{"affected":">= 7.1.0, < 7.1.3.4; = 7.2.0.beta1","affected_versions_present":true,"cve_id":"CVE-2024-32464","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-32464","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T02:13:39.964Z","patch_url":"https://github.com/rails/rails/commit/e215bf3360e6dfe1497c1503a495e384ed6b0995","primary_source":"","published":"2024-06-04T19:53:59.774Z"},{"affected":">= 6.1.0.0, < 6.1.7.8; >= 7.0.0.0, < 7.0.8.4; >= 7.1.0.0, < 7.1.3.4; >= 7.2.0.beta1, < 7.2.0.beta2","affected_versions_present":true,"cve_id":"CVE-2024-28103","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-28103","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-12-06T13:09:28.269Z","patch_url":"https://github.com/rails/rails/commit/35858f1d9d57f6c4050a8d9ab754bd5d088b4523","primary_source":"","published":"2024-06-04T19:47:44.199Z"},{"affected":">= 5.2.0, < 6.1.7.7; >= 7.0.0, < 7.0.8.1","affected_versions_present":true,"cve_id":"CVE-2024-26144","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-26144","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T17:41:06.989Z","patch_url":"https://github.com/rails/rails/commit/723f54566023e91060a67b03353e7c03e7436433","primary_source":"","published":"2024-02-27T15:44:04.166Z"},{"affected":">= 7.0.0, < 7.0.8.1; >= 7.1.0, < 7.1.3.1","affected_versions_present":true,"cve_id":"CVE-2024-26143","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-26143","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T17:41:06.380Z","patch_url":"https://github.com/rails/rails/commit/4c83b331092a79d58e4adffe4be5f250fa5782cc","primary_source":"","published":"2024-02-27T15:33:54.643Z"},{"affected":">= 7.1.0, < 7.1.3.1","affected_versions_present":true,"cve_id":"CVE-2024-26142","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-26142","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-02-13T17:41:05.743Z","patch_url":"https://github.com/rails/rails/commit/b4d3bfb5ed8a5b5a90aad3a3b28860c7a931e272","primary_source":"","published":"2024-02-27T15:25:44.103Z"},{"affected":">= 7.0.0.0, < 7.0.2.1; >= 6.1.0.0, < 6.1.4.5; >= 6.0.0.0, < 6.0.4.5; >= 5.0.0, < 5.2.6.1","affected_versions_present":true,"cve_id":"CVE-2022-23633","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-23633","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-03T03:51:44.739Z","patch_url":"https://github.com/rails/rails/commit/f9a2ad03943d5c2ba54e1d45f155442b519c75da","primary_source":"","published":"2022-02-11T00:00:00.000Z"},{"affected":"2.3","affected_versions_present":true,"cve_id":"CVE-2010-3299","cve_url":"https://cve.blacktree.nl/cve/CVE-2010-3299","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-07T03:03:18.926Z","patch_url":"","primary_source":"","published":"2019-11-12T20:55:04.000Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"rails"}}