Ruby on Rails · disclosed reports
No weakness filed
13 disclosed reports · $1,500 paid · 13 valid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. A report opens its page here: our analysis where there is one, and the link to HackerOne. The status is HackerOne's own outcome; "access needed" is only what a title states.
Open Ruby on Rails on HackerOne- reports
- 13
- valid
- 13
- paid a bounty
- 1
Every one of the 13 is a mark on the map. Named now: 1 to 13, most upvoted first.
- DoS with crafted "Range" header
- Rails::HTML::Sanitizer.allowed_uri? returns true for entity-encoded control-character-split javascript: URLs
- Validation bypass for queries generated for PostgreSQL
- ReDoS in Rack::Multipart
- Specially constructed multi-part requests cause multi-second response times; vulnerable to DoS
- ReDoS (Rails::Html::PermitScrubber.scrub_attribute)
- Nested attributes reject_if proc can be circumvented by providing "_destroy" parameter
- Unsafe Query Generation (CVE-2012-2660, CVE-2012-2694 and CVE-2013-0155) mitigation bypass
- Arbitrary file existence disclosure in Action Pack
- ActionController::Parameters .each returns an unsafe hash
- Escape Sequence Injection vulnerability in Rack
- Active Record SQL Injection Vulnerability Affecting PostgreSQL
- Active Record SQL Injection Vulnerability Affecting PostgreSQL
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.