A denial of service vulnerability exists in Rails <6.0.3.2 that allowed an untrusted user to run any pending migrations on a Rails app running in production.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| actionpack(RubyGems) | 6.0.0 | 6.0.3.2 | N/A |
CVSS Metrics
