Skip to content

Commit

Permalink
Security: Upgrade rack to 2.2.3.1
Browse files Browse the repository at this point in the history
CVE: CVE-2022-30122
GHSA: GHSA-hxqx-xwvh-44m2
URL: https://groups.google.com/g/ruby-security-ann/c/L2Axto442qk
Title: Denial of Service Vulnerability in Rack Multipart Parsing

CVE: CVE-2022-30123
GHSA: GHSA-wq4h-7r42-5hrr
URL: https://groups.google.com/g/ruby-security-ann/c/LWB10kWzag8
Title: Possible shell escape sequence injection vulnerability in Rack
  • Loading branch information
kule committed Jun 7, 2022
1 parent cfffbdf commit fc9f427
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion Gemfile.lock
Expand Up @@ -242,7 +242,7 @@ GEM
pundit_helpers (1.0.0)
pundit (~> 0.2, >= 0.2.2)
racc (1.6.0)
rack (2.2.3)
rack (2.2.3.1)
rack-cors (1.1.1)
rack (>= 2.0.0)
rack-test (1.1.0)
Expand Down

0 comments on commit fc9f427

Please sign in to comment.