Top technology
Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Carrierwave
MEDIUM 6.1
CVE-2026-44587
CarrierWave is a framework to upload files from Ruby applications. In versions prior to 2.2.7 and 3.1.3, the content_type_denylist check fails to esc…
Fix: 2.2.7 / 3.1.3+
Fix from $1,600
2026-06-17
Carrierwave
MEDIUM 6.1
CVE-2024-29034
CarrierWave is a solution for file uploads for Rails, Sinatra and other Ruby web frameworks. The vulnerability CVE-2023-49090 wasn't fully addressed.…
Fix: 2.2.6 / 3.0.7+
Fix from $1,600
2024-03-24
Carrierwave
MEDIUM 6.1
CVE-2023-49090
CarrierWave is a solution for file uploads for Rails, Sinatra and other Ruby web frameworks. CarrierWave has a Content-Type allowlist bypass vulnerab…
Fix: 2.2.5 / 3.0.5+
Fix from $1,600
2023-11-29
Carrierwave
HIGH 8.8
CVE-2021-21305EPSS 13%
CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions…
Fix: 1.3.2 / 2.1.1+
Fix from $1,950
2021-02-08