Sprockets project Sprockets 2.6.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sprockets_project:sprockets:2.6.0:*:*:*:*:*:*:*

part: a version: 2.6.0 update: *

VendorSprockets Project (72899804-0101-53cd-b8c5-7d10b869fe6e)
ProductSprockets (8251eddf-5bf9-5d6b-aa9d-2da04647f920)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/ruby-sprockets purl2cpe 2026-06-01 10:18:10.367320
pkg:deb/ubuntu/ruby-sprockets purl2cpe 2026-06-01 10:18:10.367321
pkg:gem/sprockets purl2cpe 2026-06-01 10:18:10.367322
pkg:github/rails/sprockets purl2cpe 2026-06-01 10:18:10.367324
pkg:rpm/fedora/rubygem-sprockets purl2cpe 2026-06-01 10:18:10.367325
pkg:rpm/opensuse/rubygem-sprockets purl2cpe 2026-06-01 10:18:10.367327

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-7819 vulnerable 2026-06-08 05:06:00.005722 Details available
Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10.x before 2.10.2, 2.11.x before 2.11.3, 2.12.x before 2.12.3, and 3.x before 3.0.0.beta.3, as distributed with Ruby on Rails 3.x and 4.x, allow remote attackers to determine the existence of files outside the application root via a ../ (dot dot slash) sequence with (1) double slashes or (2) URL encoding.
Published: 2014-11-08T11:00:00.000Z
Updated: 2024-08-06T13:03:27.170Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.