RubyGems/airbrake-ruby CVE-2019-16060: critical 9.8, EPSS 1.44%
Airbrake keys not being filtered
Action: Upgrade airbrake-ruby to 4.2.4 or later.
bundle update airbrake-rubyAffected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.3 | 4.2.4 | - |
Fixed versions
| 4.2.4 |
Sources
- osv: GHSA-2p82-v77v-mppr
- https://nvd.nist.gov/vuln/detail/CVE-2019-16060
- https://github.com/airbrake/airbrake-ruby/issues/468
- https://github.com/airbrake/airbrake-ruby/pull/469/commits/d29925e7838031bf7dea7016b22de52532503796
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/airbrake-ruby/CVE-2019-16060.yml
CVE-2019-16060 · published · modified · JSON