Rubyonrails Actionpack Page-caching — known CVE vulnerabilities

Every CVE whose affected-product data names Rubyonrails Actionpack Page-caching, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-8159 — CVSS 9.8 (critical): There is a vulnerability in actionpack_page-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server…
• CVE-2021-22885 — CVSS 7.5 (high): A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or…