# Rubyonrails vulnerabilities > Rubyonrails has 137 published vulnerabilities across 15 products in our catalogue. 3 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Rails, with 113. If you run Rubyonrails software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/rubyonrails ## At a glance - **Published vulnerabilities:** 137 - **Known to be exploited:** 3 - **Products:** 15 - **Versions:** 524 - **Most recently added to the known-exploited list:** [CVE-2019-5418](https://www.precursorintelligence.com/what-is/cve-2019-5418), 7 July 2025. We keep watching the list. ## Which Rubyonrails products have the most vulnerabilities? - [Rails](https://www.precursorintelligence.com/product/rubyonrails/rails): 113 published vulnerabilities, 287 versions - [Ruby on Rails](https://www.precursorintelligence.com/product/rubyonrails/ruby_on_rails): 50 published vulnerabilities, 176 versions - [Rails Html Sanitizers](https://www.precursorintelligence.com/product/rubyonrails/rails_html_sanitizers): 10 published vulnerabilities, 14 versions - [Html Sanitizer](https://www.precursorintelligence.com/product/rubyonrails/html_sanitizer): 4 published vulnerabilities, 5 versions - [Actionpack Page-Caching](https://www.precursorintelligence.com/product/rubyonrails/actionpack_page-caching): 2 published vulnerabilities, 8 versions - [Actionpack](https://www.precursorintelligence.com/product/rubyonrails/actionpack): 2 published vulnerabilities, 0 versions - [Jquery-Rails](https://www.precursorintelligence.com/product/rubyonrails/jquery-rails): 1 published vulnerability, 3 versions - [Jquery-Ujs](https://www.precursorintelligence.com/product/rubyonrails/jquery-ujs): 1 published vulnerability, 1 version - [Web Console](https://www.precursorintelligence.com/product/rubyonrails/web_console): 1 published vulnerability, 1 version - [Actionview](https://www.precursorintelligence.com/product/rubyonrails/actionview): 1 published vulnerability, 3 versions Each product page lists its own known-exploited flaws. ## Which Rubyonrails vulnerabilities are being exploited? 3 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2019-5418](https://www.precursorintelligence.com/what-is/cve-2019-5418): Rails Ruby on Rails Path Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 99%, known exploited since 7 July 2025. - [CVE-2014-0130](https://www.precursorintelligence.com/what-is/cve-2014-0130): Ruby on Rails Directory Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 54%, known exploited since 25 March 2022. - [CVE-2016-0752](https://www.precursorintelligence.com/what-is/cve-2016-0752): Ruby on Rails Directory Traversal Vulnerability. High, CVSS 7.5, chance of use in 30 days 96%, known exploited since 25 March 2022. ## Which Rubyonrails flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2013-0156](https://www.precursorintelligence.com/what-is/cve-2013-0156): >99%, High (CVSS 7.5) - [CVE-2013-0333](https://www.precursorintelligence.com/what-is/cve-2013-0333): 96%, High (CVSS 7.5) - [CVE-2016-0752](https://www.precursorintelligence.com/what-is/cve-2016-0752): 96%, High (CVSS 7.5), known exploited - [CVE-2019-5420](https://www.precursorintelligence.com/what-is/cve-2019-5420): 89%, Critical (CVSS 9.8) - [CVE-2021-22881](https://www.precursorintelligence.com/what-is/cve-2021-22881): 87%, Medium (CVSS 6.1) - [CVE-2020-8163](https://www.precursorintelligence.com/what-is/cve-2020-8163): 82%, High (CVSS 8.8) - [CVE-2016-2098](https://www.precursorintelligence.com/what-is/cve-2016-2098): 81%, High (CVSS 7.3) - [CVE-2020-8264](https://www.precursorintelligence.com/what-is/cve-2020-8264): 67%, Medium (CVSS 6.1) - [CVE-2014-0130](https://www.precursorintelligence.com/what-is/cve-2014-0130): 54%, High (CVSS 7.5), known exploited ## All Rubyonrails products we track 11 products with at least one tracked version, most vulnerabilities first: - [Rails](https://www.precursorintelligence.com/product/rubyonrails/rails): 113 vulnerabilities, 287 versions - [Ruby on Rails](https://www.precursorintelligence.com/product/rubyonrails/ruby_on_rails): 50 vulnerabilities, 176 versions - [Rails Html Sanitizers](https://www.precursorintelligence.com/product/rubyonrails/rails_html_sanitizers): 10 vulnerabilities, 14 versions - [Html Sanitizer](https://www.precursorintelligence.com/product/rubyonrails/html_sanitizer): 4 vulnerabilities, 5 versions - [Actionpack Page-Caching](https://www.precursorintelligence.com/product/rubyonrails/actionpack_page-caching): 2 vulnerabilities, 8 versions - [Jquery-Rails](https://www.precursorintelligence.com/product/rubyonrails/jquery-rails): 1 vulnerability, 3 versions - [Jquery-Ujs](https://www.precursorintelligence.com/product/rubyonrails/jquery-ujs): 1 vulnerability, 1 version - [Web Console](https://www.precursorintelligence.com/product/rubyonrails/web_console): 1 vulnerability, 1 version - [Actionview](https://www.precursorintelligence.com/product/rubyonrails/actionview): 1 vulnerability, 3 versions - [Active Resource](https://www.precursorintelligence.com/product/rubyonrails/active_resource): 1 vulnerability, 5 versions - [Globalid](https://www.precursorintelligence.com/product/rubyonrails/globalid): 1 vulnerability, 21 versions ## Questions ### How many vulnerabilities does Rubyonrails have? Our catalogue lists 137 published vulnerabilities across 15 products and 524 versions from Rubyonrails. The most recent Rubyonrails flaw added to the known-exploited list is CVE-2019-5418, on 7 July 2025. ### Which Rubyonrails vulnerabilities are being exploited? 3 Rubyonrails vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2019-5418, CVE-2014-0130 and CVE-2016-0752. The full list is on this page. ### Which Rubyonrails product has the most vulnerabilities? Rails, with 113 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Rubyonrails vulnerabilities? Create a Precursor Intelligence account and track the Rubyonrails products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Rubyonrails? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact