rails 3.0.4
Rails vulnerable to Cross-site Scripting
medium severity CVE-2014-0081~> 3.2.17, ~> 4.0.3, ~> 4.1.0.beta2, >= 4.1.0
Multiple cross-site scripting (XSS) vulnerabilities in "actionview/lib/action_view/helpers/number_helper.rb" in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper.
Moderate severity vulnerability that affects rails
medium severity CVE-2011-4319>= 3.0.0, < 3.0.11
Cross-site scripting (XSS) vulnerability in the i18n translations helper method in Ruby on Rails 3.0.x before 3.0.11 and 3.1.x before 3.1.2, and the rails_xss plugin in Ruby on Rails 2.3.x, allows remote attackers to inject arbitrary web script or HTML via vectors related to a translations string whose name ends with an "html" substring.
Cross site scripting in rails
medium severity CVE-2011-1497< 3.0.6
A cross-site scripting vulnerability flaw was found in the auto_link function in Rails before version 3.0.6.
No officially reported memory leakage issues detected.
This gem version does not have any officially reported memory leaked issues.
Gem version without a license.
Unless a license that specifies otherwise is included, nobody can use, copy, distribute, or modify this library without being at risk of take-downs, shake-downs, or litigation.
This gem version is available.
This gem version has not been yanked and is still available for usage.