Reid MorrisonEOL Remediation

EOL Check Services Security Open Source About Contact

Reid MorrisonEOL Remediation

Rails and Ruby end-of-life finding · ·

Check or update this finding at

EOL Exposure Check

Is your Rails application a compliance finding?

Pick your Rails and Ruby versions. You get the days each has gone without vendor security patches, the controls that implicates, and the upgrade path required. Add your Gemfile.lock and it also names every published advisory matching a gem you have pinned. Nothing is uploaded.

Your versions

Rails version

Ruby version

Gemfile.lock Optional, recommended

Drop it here, or choose a file Checks every gem you pin for published advisories, and sets the versions above. Read in your browser, never uploaded.

Select your versions to generate the finding.

Sources. Rails end-of-life dates from the Rails maintenance policy and the supported versions and end-of-support announcements published on rubyonrails.org; Rails release dates from RubyGems. Ruby dates from the Ruby maintenance branches. Verified 8 September 2026. Version compatibility from the FastRuby compatibility table. Gem advisories from rubysec/ruby-advisory-db, the database bundler-audit reads, matched the way it matches them. Control references are to PCI DSS v4.0.1, the SOC 2 Trust Services Criteria, 45 CFR Part 164, and ISO/IEC 27001:2022.

This tool reports whether your versions receive vendor security patches, which controls reference that condition, and, if you provide a Gemfile.lock, which published advisories name the gem versions pinned in it. It is not a vulnerability scan: it reads declared version numbers rather than running code, and it cannot see a backported fix, a vendored patch or a compensating control, any of which may already answer a row it reports. It is not a compliance opinion. Whether a given control is met depends on your compensating controls and your assessor.

Reid Morrison Inc., a Florida corporation · 7901 4th St N, Ste 300, St. Petersburg, FL 33702 · Privacy