RubyGems CVE Archive

carrierwave CVE Vulnerabilities

All known CVEs affecting carrierwave. Kodem’s runtime-powered SCA reveals which are actually reachable in your application.

Known vulnerabilities
CVE
Summary
Severity
CVE-2026-44587
CarrierWave has a denylisted_content_type bypass via Unescaped Regex…
Medium
CVE-2024-29034
CarrierWave content-Type allowlist bypass vulnerability which possibly leads to…
Medium
CVE-2023-49090
CarrierWave Content-Type allowlist bypass vulnerability, possibly leading to XSS
Medium
CVE-2021-21305
Code Injection vulnerability in CarrierWave::RMagick
High
CVE-2021-21288
Server-side request forgery in CarrierWave
Medium

Prioritize carrierwave vulnerabilities

Kodem Kai can identify which of these CVEs are reachable in your dependency tree and generate targeted fix recommendations.

Get a demo →

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo