CVE-2020-8163: Debian Linux

High severity, CVSS 8.8. EPSS: 82% chance of exploitation in the next 30 days.

The is a code injection vulnerability in versions of Rails prior to 5.0.1 that wouldallow an attacker who controlled the `locals` argument of a `render` call to perform a RCE.

Affected products

• Debian Debian Linux: version 9.0 only
• Rubyonrails Rails: before 5.0.1 (fixed in 5.0.1)

Published 2020-07-02. Last modified 2026-06-17.