Rails known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 3 Rails vulnerabilities: 0 added in the last 365 days, 0 rated critical (CVSS 9 or higher), and 0 with known ransomware use. The most recent was added Jul 7, 2025.
RSS feed for Rails exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2025-07-07 | CVE-2019-5418 | Rails Ruby on Rails Path Traversal Vulnerability | 7.5 (v3.1) | 98.5% | 2025-07-28 | Unknown |
| 2022-03-25 | CVE-2014-0130 | Ruby on Rails Directory Traversal Vulnerability | 7.5 (v3.1) | 53.7% | 2022-04-15 | Unknown |
| 2022-03-25 | CVE-2016-0752 | Ruby on Rails Directory Traversal Vulnerability | 7.5 (v3.1) | 95.5% | 2022-04-15 | Unknown |