Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-55193

Good to know:

icon

Date: August 13, 2025

Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

Severity Score

Related Resources (9)

https://github.com/rails/rails/commit/6a944ca4805e72050a0fbb1a461534eb760d3202
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2025-55193.yml
https://nvd.nist.gov/vuln/detail/CVE-2025-55193
https://github.com/rails/rails
https://security-tracker.debian.org/tracker/CVE-2025-55193
https://github.com/rails/rails/commit/568c0bc2f1e74c65d150a84b89a080949bf9eb9b
https://github.com/rails/rails/commit/3beef20013736fd52c5dcfdf061f7999ba318290
https://github.com/rails/rails/security/advisories/GHSA-76r7-hhxj-r776
https://www.mend.io/vulnerability-database/CVE-2025-55193

Severity Score

Weakness Type (CWE)

Improper Neutralization of Escape, Meta, or Control Sequences

CWE-150

Top Fix

icon

Upgrade Version

Upgrade to version activerecord - 8.0.2.1;activerecord - 7.2.2.2;activerecord - 7.1.5.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

Do you need more information?

Contact Us