ZeusQA
Start free

Known exploited vulnerabilities

Rails vulnerabilities attackers have used

Every Rails vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 Rails vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2019-5418, added Jul 7, 2025. Ruby on Rails has the most entries (3).

In KEV, all time
3
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every Rails entry in CISA KEV

  1. CVE-2019-5418

    Added · due

    Rails Ruby on Rails Path Traversal Vulnerability

    Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file…

  2. CVE-2016-0752

    Added · due

    Ruby on Rails Directory Traversal Vulnerability

    Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.

  3. CVE-2014-0130

    Added · due

    Ruby on Rails Directory Traversal Vulnerability

    Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works