Skip to content
Threat Feed
Subscribe

Vendor

Rails

2 briefs RSS
critical advisory

Ruby and Ruby on Rails Vulnerability Allows Code Execution

A remote, anonymous attacker can exploit a vulnerability in Ruby and Ruby on Rails to bypass security measures and execute arbitrary code.

Ruby +1 code-execution rails
2r 1t
medium advisory

Katalyst Koi Session Cookies Replayable After Logout

Katalyst Koi versions before 4.20.0 and between 5.0.0 and 5.6.0 fail to invalidate admin session cookies upon logout, allowing attackers with a valid cookie to maintain unauthorized access.

katalyst-koi +2 session-replay vulnerability authentication
2r 1t