CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/rubygem-rails71 7.1.6

Full-stack web application framework

8
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 7.1.6
Upstream
up to date
Last update
to 7.1.6 · 66d433f693
Quarterly
2026Q4: 7.1.6
WWW
https://rubyonrails.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install rubygem-rails71
installs 7.1.6 from latest; from quarterly (2026Q4) 7.1.6
Port
# cd /usr/ports/www/rubygem-rails71 && make install clean
Size
5.3 KiB download · 9.2 KiB installed
Depends on
databases/rubygem-activemodel71 7.1.6, databases/rubygem-activerecord71 7.1.6, databases/rubygem-dalli 5.1.0, databases/rubygem-redis-namespace 1.11.0, databases/rubygem-sqlite3 2.9.6, devel/ruby-gems 4.0.21, devel/rubygem-actionview71 7.1.6, devel/rubygem-activejob71 7.1.6, devel/rubygem-activesupport71 7.1.6, devel/rubygem-bootsnap 1.26.0, devel/rubygem-capybara 3.40.0, devel/rubygem-jbuilder-rails71 2.15.1, devel/rubygem-json 3.0.2, devel/rubygem-listen 3.10.0, devel/rubygem-minitest 5.27.0, devel/rubygem-msgpack 1.8.5, devel/rubygem-rake 13.4.2, devel/rubygem-readline-ext 0.2.0, devel/rubygem-sprockets-rails-rails71 3.5.2, devel/rubygem-sucker_punch 3.3.0, devel/rubygem-web-console-rails71 4.2.1, graphics/rubygem-image_processing 1.14.0_1, lang/ruby34 3.4.9_2,1, mail/rubygem-actionmailbox71 7.1.6, mail/rubygem-actionmailer71 7.1.6, net/rubygem-activestorage71 7.1.6_1, net/rubygem-connection_pool 3.0.2, sysutils/rubygem-bundler 4.0.21,1, textproc/rubygem-actiontext71 7.1.6, textproc/rubygem-libxml-ruby 6.0.0, textproc/rubygem-nokogiri 1.19.4, textproc/rubygem-rexml 3.4.4, www/rubygem-actioncable71 7.1.6, www/rubygem-actionpack71 7.1.6, www/rubygem-cssbundling-rails-rails71 1.4.3, www/rubygem-importmap-rails-rails71 2.2.3, www/rubygem-jsbundling-rails-rails71 1.3.1, www/rubygem-propshaft-rails71 1.3.2, www/rubygem-puma 8.0.2, www/rubygem-rack 3.2.7,3, www/rubygem-rack-cache 1.17.0, www/rubygem-railties71 7.1.6, www/rubygem-selenium-webdriver 4.49.0, www/rubygem-stimulus-rails-rails71 1.3.4, www/rubygem-tailwindcss-rails-rails71 1.0.0, www/rubygem-turbo-rails-rails71 2.0.23, www/rubygem-webmock 3.26.4, www/rubygem-webrick 1.9.2
License
MIT

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 167.1.67.1.6–
FreeBSD 157.1.67.1.6–
FreeBSD 147.1.67.1.67.1.6

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 157.1.67.1.6–
FreeBSD 147.1.67.1.67.1.6

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (8)

The CVE record lists the packaged version 7.1.6 as affected, and no VuXML entry names the CVE. What does this mean?

Update to 7.2.3.1 fixes all 8 unaddressed CVEs.
CVECVSSPublishedDescription
CVE-2026-331958.02026-03-24Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's `DiskService#path_fo…
CVE-2026-331696.92026-03-24Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. `NumberToDelimitedConverter` uses a lookahead-based regular…
CVE-2026-332026.62026-03-24Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Storage's `DiskService#delete_…
CVE-2026-331746.62026-03-24Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when serving files through Active Sto…
CVE-2026-331766.62026-03-24Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, Active Sup…
CVE-2026-331705.32026-03-24Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `SafeBuffe…
CVE-2026-331735.32026-03-24Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` accepts arb…
CVE-2026-336582.32026-03-26Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1 Active Storage's proxy controller does…

VuXML only (0)

Listed in VuXML, the packaged version 7.1.6 is still in the affected range; pkg audit reports it. What does this mean?

None.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (16)

Bernhard Froehlich (decke) · 7.1.6
www/rubygem-rails*: Fix deprecated CPE_PRODUCT
66d433f693
Po-Chuan Hsieh (sunpoet) · 7.1.6
www/rubygem-rails71: Update to 7.1.6

Changes:	https://github.com/rails/rails/releases
68167a4a32
Po-Chuan Hsieh (sunpoet) · 7.1.5.2
www/rubygem-rails71: Remove outdated RUBY_VER check after lang/ruby31 removal (14280b8242d3e349820e97a5d9172d1485e96de0)
c39273f16b
Po-Chuan Hsieh (sunpoet) · 7.1.5.2
www/rubygem-rails71: Update to 7.1.5.2

Changes:	https://github.com/rails/rails/releases
4c8a4f3820
Po-Chuan Hsieh (sunpoet) · 7.1.5.1
www/rubygem-rails71: Update to 7.1.5.1

Changes:	https://github.com/rails/rails/releases
c07d586cf4
Po-Chuan Hsieh (sunpoet) · 7.1.5
www/rubygem-rails71: Update to 7.1.5

Changes:	https://github.com/rails/rails/releases
e24d4cf556
Po-Chuan Hsieh (sunpoet) · 7.1.4.2
www/rubygem-rails71: Update to 7.1.4.2

Changes:	https://github.com/rails/rails/releases
898aaafca6
Po-Chuan Hsieh (sunpoet) · 7.1.4.1
www/rubygem-rails71: Update to 7.1.4.1

Changes:	https://github.com/rails/rails/releases
79c7f00c60
Po-Chuan Hsieh (sunpoet) · 7.1.4
www/rubygem-rails71: Update to 7.1.4

- Change some RUN_DEPENDS to their Rails 7.1 variant
  Those ports will be changed to Rails 7.2.
- Reformat pkg-descr

Changes:	https://github.com/rails/rails/releases
ed5cc118c9
Po-Chuan Hsieh (sunpoet) · 7.1.3.4
www/rubygem-rails71: Allow build with rubygem-sqlite3 2.0.0+
170e0d7ff1
Po-Chuan Hsieh (sunpoet) · 7.1.3.3
www/rubygem-rails71: Allow build with rubygem-sqlite3 2.0.0+
195463a5d1
Po-Chuan Hsieh (sunpoet) · 7.1.3.3
www/rubygem-rails71: Update to 7.1.3.3

Changes:	https://github.com/rails/rails/releases
f1304b9d63
Po-Chuan Hsieh (sunpoet) · 7.1.3.2
www/rubygem-rails71: Update to 7.1.3.2

Changes:	https://github.com/rails/rails/releases
f5ab3fddb8
Po-Chuan Hsieh (sunpoet) · 7.1.3
www/rubygem-rails71: Update to 7.1.3

Changes:	https://github.com/rails/rails/releases
c85f49e6cc
Po-Chuan Hsieh (sunpoet) · 7.1.2
www/rubygem-rails71: Update to 7.1.2

Changes:	https://github.com/rails/rails/releases
05ce842344
Po-Chuan Hsieh (sunpoet) · 7.1.1
www/rubygem-rails71: Add rubygem-rails71 7.1.1

Rails is a web-application framework that includes everything needed to create
database-backed web applications according to the Model-View-Controller (MVC)
pattern.

Understanding the MVC pattern is key to understanding Rails. MVC divides your
application into three layers: Model, View, and Controller, each with a specific
responsibility.

Active Record, Active Model, Action Pack, and Action View can each be used
independently outside Rails. In addition to that, Rails also comes with Action
Mailer, a library to generate and send emails; Action Mailbox, a library to
receive emails within a Rails application; Active Job, a framework for declaring
jobs and making them run on a variety of queuing backends; Action Cable, a
framework to integrate WebSockets with a Rails application; Active Storage, a
library to attach cloud and local files to Rails applications; Action Text, a
library to handle rich text content; and Active Support, a collection of utility
classes and standard library extensions that are useful for Rails, and may also
be used independently outside Rails.
79f61337fc