CVE Tools
Track your stack

Rails

26 CVEs across 4 months on the top 200 list since Dec 2022. Peak rank #113 in Dec 2024. None of them is in CISA KEV.

Rails CVEs per month since Dec 2022

Dec 2022 to Mar 2026 in the lens. Point at a month to read it, or drag the frame to move through the record.Tallest in the lens: 10, Mar 2026
Dec 2022: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #139 · mostly Rails-html-sanitizerJan 2023: not on the top 200 that monthFeb 2023: not on the top 200 that monthMar 2023: not on the top 200 that monthApr 2023: not on the top 200 that monthMay 2023: not on the top 200 that monthJun 2023: not on the top 200 that monthJul 2023: not on the top 200 that monthAug 2023: not on the top 200 that monthSep 2023: not on the top 200 that monthOct 2023: not on the top 200 that monthNov 2023: not on the top 200 that monthDec 2023: not on the top 200 that monthJan 2024: not on the top 200 that monthFeb 2024: not on the top 200 that monthMar 2024: not on the top 200 that monthApr 2024: not on the top 200 that monthMay 2024: not on the top 200 that monthJun 2024: not on the top 200 that monthJul 2024: not on the top 200 that monthAug 2024: not on the top 200 that monthSep 2024: not on the top 200 that monthOct 2024: not on the top 200 that monthNov 2024: not on the top 200 that monthDec 2024: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #113 · mostly Rails-html-sanitizer, RailsJan 2025: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #136 · mostly Activesupport, Rails-ujs, Action PackFeb 2025: not on the top 200 that monthMar 2025: not on the top 200 that monthApr 2025: not on the top 200 that monthMay 2025: not on the top 200 that monthJun 2025: not on the top 200 that monthJul 2025: not on the top 200 that monthAug 2025: not on the top 200 that monthSep 2025: not on the top 200 that monthOct 2025: not on the top 200 that monthNov 2025: not on the top 200 that monthDec 2025: not on the top 200 that monthJan 2026: not on the top 200 that monthFeb 2026: not on the top 200 that monthMar 2026: 10 CVEs · 2 critical · 0 now in CISA KEV · rank #124 · mostly Activestorage, Activesupport, Actionpack

In the lens

The products that kept showing up in Rails's monthly top three from Dec 2022 to Mar 2026. Move the lens and the list follows.

  1. Rails-html-sanitizer92 months
  2. Activestorage51 month
  3. Activesupport52 months
  4. Action Pack11 month
  5. Actionpack11 month
  6. Rails11 month
  7. Rails-ujs11 month

Year by year

Each year's months on the top 200 list. Pick a year to read it in the lens.

The record

Peak rank
#113 in Dec 2024
Busiest month
Mar 2026, 10 CVEs
Months with a KEV entry
0 of 4 on the list
On the top 200 list
4 of 40 monthly snapshots

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store