CVE-2025-55193 – Ruby on Rails ANSI Sequence Injection Vulnerability

CVE ID : CVE-2025-55193

Published : Aug. 13, 2025, 11:15 p.m. | 1 hour, 18 minutes ago

Description : Active Record connects classes to relational database tables. Prior to versions 7.1.5.2, 7.2.2.2, and 8.0.2.1, the ID passed to find or similar methods may be logged without escaping. If this is directly to the terminal it may include unescaped ANSI sequences. This issue has been patched in versions 7.1.5.2, 7.2.2.2, and 8.0.2.1.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…