Skip to content

CVE record · 1 source

CVE-2026-126081

CVSS 7.5

Action Pack is a framework for handling and responding to web requests.

Vendor: Ruby on Rails
Product: rails
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness: CWE-915

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 6h ago

Action Pack is a framework for handling and responding to web requests.

Action Pack is a framework for handling and responding to web requests. Prior to 8.1.4.1 and 8.0.5.2, ActionController::Parameters#each_key delegates to the internal ActiveSupport::HashWithIndifferentAccess that holds the request…

CVSS 7.5 Fix available CVE-2026-126081 Ruby on Rails