rails 3.1.7
Rails vulnerable to Cross-site Scripting
medium severity CVE-2014-0081~> 3.2.17, ~> 4.0.3, ~> 4.1.0.beta2, >= 4.1.0
Multiple cross-site scripting (XSS) vulnerabilities in "actionview/lib/action_view/helpers/number_helper.rb" in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the (1) format, (2) negative_format, or (3) units parameter to the (a) number_to_currency, (b) number_to_percentage, or (c) number_to_human helper.
No officially reported memory leakage issues detected.
This gem version does not have any officially reported memory leaked issues.
Gem version without a license.
Unless a license that specifies otherwise is included, nobody can use, copy, distribute, or modify this library without being at risk of take-downs, shake-downs, or litigation.
This gem version is available.
This gem version has not been yanked and is still available for usage.