Showing 792 of 792 total issues
CSRF Vulnerability in rails-ujs Open
Open
actionview (5.2.4.1)
- Read upRead up
- Exclude checks
Advisory: CVE-2020-8167
Criticality: Medium
URL: https://groups.google.com/forum/#!topic/rubyonrails-security/x9DixQDG9a0
Solution: upgrade to >= 5.2.4.3, ~> 5.2.4, >= 6.0.3.1
Rule doesn't have all its properties in alphabetical order. Open
Open
body {
- Exclude checks
Rule doesn't have all its properties in alphabetical order. Open
Open
.ls_infobox {
- Exclude checks
Using width with padding can sometimes make elements larger than you expect. Open
Open
padding: 20px;
- Exclude checks
Rule doesn't have all its properties in alphabetical order. Open
Open
select, textarea, input[type="text"], input[type="password"],
- Exclude checks
Rule doesn't have all its properties in alphabetical order. Open
Open
.nav-pills>li>a {
- Exclude checks
Rule doesn't have all its properties in alphabetical order. Open
Open
.navbar .btn-navbar {
- Exclude checks
Rule doesn't have all its properties in alphabetical order. Open
Open
.navbar .nav>li>.dropdown-menu:before {
- Exclude checks
Possible XSS vulnerability in ActionView Open
Open
actionview (5.2.4.1)
- Read upRead up
- Exclude checks
Advisory: CVE-2020-5267
Criticality: Medium
URL: https://groups.google.com/forum/#!topic/rubyonrails-security/55reWMM_Pg8
Solution: upgrade to >= 5.2.4.2, ~> 5.2.4, >= 6.0.2.2
Use of !important Open
Open
height: 100% !important;
- Exclude checks
Use of !important Open
Open
background-color: whitesmoke !important;
- Exclude checks
Don't use IDs in selectors. Open
Open
#footer {
- Exclude checks
Don't use IDs in selectors. Open
Open
#cookie-message {
- Exclude checks
Rule doesn't have all its properties in alphabetical order. Open
Open
#cookie-message-inner .btn {
- Exclude checks
Use of !important Open
Open
float: right !important;
- Exclude checks
Rule doesn't have all its properties in alphabetical order. Open
Open
.navbar-wrapper {
- Exclude checks
Rule doesn't have all its properties in alphabetical order. Open
Open
.navbar .nav>.active>a, .navbar .nav>.active>a:hover, .navbar .nav>.active>a:focus {
- Exclude checks
Don't use IDs in selectors. Open
Open
#button-rack {
- Exclude checks
Possible Information Disclosure / Unintended Method Execution in Action Pack Open
Open
actionpack (5.2.4.1)
- Read upRead up
- Exclude checks
Advisory: CVE-2021-22885
Criticality: High
URL: https://groups.google.com/g/rubyonrails-security/c/NiQl-48cXYI
Solution: upgrade to ~> 5.2.4.6, ~> 5.2.6, >= 6.0.3.7, ~> 6.0.3, >= 6.1.3.2
Rule doesn't have all its properties in alphabetical order. Open
Open
.navbar-inner:before, .navbar-inner:after {
- Exclude checks