All vulnerabilities

Servers and applications

GHSA-r9jg-fmfx-2gv6

Possible cache poisoning in Action Pack content negotiation

Severity
Medium 4.8
Published
4 Nov 2026
Last changed
4 Nov 2026
Added to UpHeron
4 Nov 2026
Fixed in
8.0.5.2, 8.1.4.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Ruby on RailsServers and applications · github:rails/rails
  • Every version before 8.0.5.2
  • From 8.1 before 8.1.4.1

References