RubyGems/activerecord CVE-2025-55193: low 2.7, EPSS 0.59%
Active Record logging vulnerable to ANSI escape injection
Action: Upgrade activerecord to 7.1.5.2 or later.
bundle update activerecordAffected
| introduced | fixed | last affected |
|---|---|---|
| 8.0 | 8.0.2.1 | - |
| 7.2 | 7.2.2.2 | - |
| 0 | 7.1.5.2 | - |
Fixed versions
| 8.0.2.1 | 7.2.2.2 | 7.1.5.2 |
Sources
- osv: GHSA-76r7-hhxj-r776
- nvd: CVE-2025-55193
- https://github.com/rails/rails/security/advisories/GHSA-76r7-hhxj-r776
- https://github.com/rails/rails/commit/3beef20013736fd52c5dcfdf061f7999ba318290
- https://github.com/rails/rails/commit/568c0bc2f1e74c65d150a84b89a080949bf9eb9b
- https://github.com/rails/rails/commit/6a944ca4805e72050a0fbb1a461534eb760d3202
- https://github.com/rails/rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2025-55193.yml
CVE-2025-55193 · published · modified · JSON