Real saved report · no signup required
Rails
RubyGems · rails
Health score /100
Very low issue resolution
Daily monitoring ·
Some data sources were unavailable during this scan. Findings may be incomplete.
Upstream repository: rails/rails ↗Grades measure upstream repository maintenance health, not the security of a specific installed version. Security findings below concern the dependencies inspected in that repository; coverage may be incomplete.
Maintenance breakdown
Resolution
25/100Very low issue resolution
Close rate: 25%. Most issues are never resolved.
Recent activity
30 issues closed in the last 30 days.
View evidence ↗
Risk Flags
100/100Active development
Last commit was 13 hours ago.
View evidence ↗Recent release
Latest release (v8.1.4.1) was 5 days ago.
View evidence ↗
Backlog Health
100/100Healthy backlog
Only 0% of open issues are older than 6 months.
Responsiveness
100/100Excellent responsiveness
Median open issue age is under a day. Issues are being addressed quickly.
View evidence ↗
Score history
| Scan completed (UTC) | Grade | Health score |
|---|---|---|
| C | 77.5 | |
| C | 71.5 | |
| C | 77.5 | |
| B | 80.5 | |
| B | 83.5 | |
| C | 77.5 | |
| B | 82.1 | |
| C | 76.1 | |
| C | 70.1 | |
| B | 82.1 | |
| B | 82.1 | |
| C | 73.1 | |
| C | 76.1 | |
| B | 85.1 | |
| A | 94.1 | |
| C | 76.1 | |
| C | 78.0 | |
| C | 71.5 | |
| C | 77.5 |
Security findings
rack-cache ~> 1.2
Rack-Cache caches sensitive headers
unknown · CVE-2012-2671
View advisory ↗
bcrypt ~> 3.1.11
bcrypt-ruby has an Integer Overflow that Causes Zero Key-Strengthening Iterations at Cost=31 on JRuby
unknown · CVE-2026-33306
View advisory ↗
json >= 2.3.0
Ruby JSON has a format string injection vulnerability
high · CVE-2026-33210
View advisory ↗Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams
low · CVE-2026-71847
View advisory ↗Out-of-bounds Read in Ruby JSON Parser
high · CVE-2025-27788
View advisory ↗Unsafe object creation in json RubyGem
high · CVE-2020-10663
View advisory ↗Ruby json: JSON generator heap buffer overflow when streaming to an IO
low · CVE-2026-54696
View advisory ↗JSON gem has Improper Input Validation vulnerability
high · CVE-2013-0269
View advisory ↗
uri >= 0.13.1
URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+
low · CVE-2025-27221
View advisory ↗Ruby URI component ReDoS issue
high · CVE-2023-28755
View advisory ↗URI gem has ReDoS vulnerability
medium · CVE-2023-36617
View advisory ↗URI Credential Leakage Bypass over CVE-2025-27221
low · CVE-2025-61594
View advisory ↗
Healthier alternatives
- No alternatives were returned by this scan.
We check this public collection daily. You can scan your own dependencies for free.