.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

rails 1.1.6 vulnerabilities

11 advisories known · rails@1.1.6 · 7 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 1.1.6

SEVERITYADVISORYPUBLISHED

Criticalrails vulnerable to improper authenticationGHSA-rxq3-gm4p-5fj4CVE-2009-2422Affected <2.3.3Fixed in 2.3.3OSV source ↗9 years ago

MediumModerate severity vulnerability that affects railsGHSA-9p3v-wf2w-v29cCVE-2009-4214Affected <2.2.2, >=2.3.0 <2.3.5Fixed in 2.2.2 Fixed in 2.3.5OSV source ↗9 years ago

MediumModerate severity vulnerability that affects railsGHSA-fjfg-q662-gm6jCVE-2007-5379Affected <1.2.4Fixed in 1.2.4OSV source ↗9 years ago

MediumModerate severity vulnerability that affects railsGHSA-gm25-fpmr-43fjCVE-2007-3227Affected <1.2.5Fixed in 1.2.5OSV source ↗9 years ago

Mediumrails is vulnerable to CRLF injectionGHSA-jmgf-p46x-982hCVE-2008-5189Affected <2.0.5Fixed in 2.0.5OSV source ↗9 years ago

MediumSession fixation vulnerability in Rails GHSA-jwhv-rgqc-fqj5CVE-2007-5380Affected <1.2.4Fixed in 1.2.4OSV source ↗9 years ago

Mediumsession fixation protection mechanism in cgi_process.rb in RailsGHSA-p4c6-77gc-694xCVE-2007-6077Affected <1.2.6Fixed in 1.2.6OSV source ↗9 years ago

Does not affect 1.1.6

SEVERITYADVISORYPUBLISHED

HighRails Denial of Service vulnerabilityGHSA-9wrq-xvmp-xjc8CVE-2006-4112Affected >=1.1.0 <1.1.6Fixed in 1.1.6OSV source ↗9 years ago

HighRuby on Rails vulnerable to code injectionGHSA-rvpq-5xqx-pfppCVE-2006-4111Affected >=1.1.0 <1.1.6Fixed in 1.1.6OSV source ↗9 years ago

MediumRails has possible XSS Vulnerability in Action ControllerGHSA-9822-6m93-xqf4BIT-rails-2024-26143CVE-2024-26143Affected >=7.0.0 <7.0.8.1, >=7.1.0 <7.1.3.1Fixed in 7.0.8.1 Fixed in 7.1.3.1OSV source ↗3 years ago

MediumRails vulnerable to Cross-site ScriptingGHSA-m46p-ggm5-5j83CVE-2014-0081Affected >=3.0.0 <3.2.17, >=4.0.0 <4.0.3Fixed in 3.2.17 Fixed in 4.0.3OSV source ↗9 years ago