CVE-2016-3693: Safemode Project Safemode

High severity, CVSS 8.1. EPSS: 2.1% chance of exploitation in the next 30 days.

The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.

Affected products

• Safemode Project Safemode: up to and including 1.2.3

Published 2016-05-20. Last modified 2026-06-17.