Is activerecord safe to use?

activerecord has 1 known vulnerabilities on the latest version (8.1.3). DepScope rates its health at 84/100 (low risk).

What is the latest version of activerecord?

The latest version of activerecord is 8.1.3, released 2026-03-24.

Does activerecord have known vulnerabilities?

Yes. activerecord has 1 known vulnerabilities. See depscope.dev/pkg/rubygems/activerecord for details.

Is activerecord deprecated?

No, activerecord is actively maintained. Latest release: 8.1.3 (2026-03-24).

What are alternatives to activerecord?

Popular alternatives to activerecord in RubyGems include: jmespath, netrc, thread_safe, tzinfo, websocket-extensions.

What license does activerecord use?

activerecord is licensed under MIT.

activerecord

rubygemsv8.1.3

Databases on Rails. Build a persistent domain model by mapping database tables to Ruby classes. Strong conventions for associations, validations, aggregations, migrations, and testing come baked-in.

License MITpermissive20 versions3 deps7,781,341 weekly dl

rails/rails/tree/v8.1.3/activerecord

/ 100

Health

safe to use

[email protected] is safe to use (health: 84/100)

Update to >= 5.0.0.beta1.1 to fix known vulnerabilities

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

23/25

security

9/15

maturity

10/15

community

0/15

popularity_floor

Vulnerabilities

1 medium

Advisories (1)

Severity	ID	Summary	Fixed in
medium	CVE-2015-7577	Active Record Improper Access Control	5.0.0.beta1.1

Quality signals

OSS Criticality

0.42medium

Health History

Dependency Tree

License Audit

Dependencies (3)

activemodel activesupport timeout

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/rubygems/activerecord