Vendor
rails
On CISA KEV1Public exploit7Avg CVSS5.4
CVEs in the catalog
47
since 2018-03
Months in the top 100
8
months with a stored rank
Best rank
#38
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| rails | 14 | 30% |
| rails html sanitizer | 11 | 23% |
| activestorage | 6 | 13% |
| activesupport | 5 | 11% |
| actionview | 3 | 6% |
| https github com rails rails | 3 | 6% |
| red hat 3scale api management platform 2 | 2 | 4% |
| action pack | 1 | 2% |
| actionpack | 1 | 2% |
| kredis json | 1 | 2% |
| rack | 1 | 2% |
| rails ujs | 1 | 2% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 19 | 40% |
| CWE-1333 | 6 | 13% |
| CWE-400 | 3 | 6% |
| CWE-770 | 3 | 6% |
| CWE-200 | 2 | 4% |
| CWE-22 | 2 | 4% |
| CWE-77 | 2 | 4% |
| CWE-80 | 2 | 4% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-73648 | CWE-79 | none yet | 5.1 | 2026-08-13 |
| CVE-2026-66066 | CWE-1188 | 1 | 9.5 | 2026-07-30 |
| CVE-2026-33658 | CWE-770 | none yet | 2.3 | 2026-03-26 |
| CVE-2026-33202 | CWE-74 | none yet | 6.6 | 2026-03-23 |
| CVE-2026-33195 | CWE-22 | none yet | 8.1 | 2026-03-23 |
| CVE-2026-33176 | CWE-400, CWE-770 | none yet | 6.6 | 2026-03-23 |
| CVE-2026-33174 | CWE-789 | none yet | 6.6 | 2026-03-23 |
| CVE-2026-33173 | CWE-925 | none yet | 5.3 | 2026-03-23 |
| CVE-2026-33170 | CWE-79 | none yet | 5.3 | 2026-03-23 |
| CVE-2026-33169 | CWE-400, CWE-1333 | none yet | 6.9 | 2026-03-23 |
| CVE-2026-33168 | CWE-79 | none yet | 2.3 | 2026-03-23 |
| CVE-2026-33167 | CWE-79 | none yet | 1.3 | 2026-03-23 |
| CVE-2025-24293 | CWE-94, CWE-77 | 1 | 8.1 | 2026-01-30 |
| CVE-2025-55193 | CWE-150 | none yet | 2.7 | 2025-08-13 |
| CVE-2023-23913 | CWE-79 | none yet | 6.3 | 2025-01-09 |