Ruby on Rails security posture
Review linked rules in the directory and use Composer to export guardrails for your IDE. Detailed posture metrics will appear here as the catalog grows.
2 linked rules in the directory.
Top risks for this stack
00 critical00 high
Rails Active Support has a possible DoS vulnerability in its number helpersMEDIUM
Mar 2026
Rule coverage exists — verify in Composer export.
Rails Active Support has a possible XSS vulnerability in SafeBuffer#%MEDIUM
Mar 2026
Rule coverage exists — verify in Composer export.
Rails Active Support has a possible ReDoS vulnerability in number_to_delimitedMEDIUM
Mar 2026
Rule coverage exists — verify in Composer export.
Active Record logging vulnerable to ANSI escape injectionMEDIUM
Aug 2025
Rule coverage exists — verify in Composer export.
Possible ReDoS vulnerability in HTTP Token authentication in Action ControllerMEDIUM
Oct 2024
Rule coverage exists — verify in Composer export.
Possible ReDoS vulnerability in query parameter filtering in Action DispatchMEDIUM
Oct 2024
Rule coverage exists — verify in Composer export.
Missing security headers in Action Pack on non-HTML responsesMEDIUM
Jun 2024
Rule coverage exists — verify in Composer export.
Rails ReDoS in Accept header parsingMEDIUM
Feb 2024
Rule coverage exists — verify in Composer export.