All vulnerabilities

Servers and applications

CVE-2024-54133

Possible Content Security Policy bypass in Action Dispatch

Severity
Low
Published
10 Dec 2024
Last changed
10 Dec 2024
Added to UpHeron
3 Nov 2026
Fixed in
7.0.8.7, 7.1.5.1, 7.2.2.1, 8.0.0.1
Also known as
GHSA-vfm5-rmrh-j26v
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Ruby on RailsServers and applications · github:rails/rails
  • From 5.2.0 before 7.0.8.7
  • From 7.1.0 before 7.1.5.1
  • From 7.2.0 before 7.2.2.1
  • From 8.0.0 before 8.0.0.1

References