Rails Actionpack vulnerabilities

1 known vulnerability affecting rails/actionpack.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

LOW1

Vulnerabilities

Page 1 of 1

CVE-2026-33167LOWCVSS 1.3v>= 8.1.0, < 8.1.2.12026-03-23

CVE-2026-33167 [LOW] CWE-79 CVE-2026-33167: Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8. Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary HTML and JavaScript into the page, leading to XSS. This affects applications with detailed excep