← All advisories

Critical severity9.8NVD Advisory· Published Jan 21, 2020· Updated Jun 17, 2026

CVE-2015-2784

CVE-2015-2784

Description

The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
papercropRubyGems	< 0.3.0	0.3.0

Affected products

3

Papercrop Project/Papercrop
cpe:2.3:a:papercrop_project:papercrop:*:*:*:*:*:ruby:*:*
Range: <0.3.0
Ruby on Rails/papercrop gemdescription
ghsa-coords
pkg:gem/papercrop
Range: < 0.3.0

Patches

Vulnerability mechanics

References

4

github.com/rsantamaria/papercrop/commit/b4ecd95debaf0a8712bd1d34def83f41fc6b3579nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-m44r-gv6q-9j9rghsaADVISORY
github.com/rsantamaria/papercrop/blob/master/CHANGELOG.mdnvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2015-2784ghsaADVISORY

News mentions

0

No linked articles in our index yet.