RubyGems/restforce CVE-2018-3777: critical 9.8, EPSS 1.51%

restforce vulnerable to Improper Input Validation

Action: Upgrade restforce to 3.0.0 or later.

bundle update restforce

Affected

Fixed versions

Sources

• osv: GHSA-534w-937m-v7x3
• https://nvd.nist.gov/vuln/detail/CVE-2018-3777
• https://github.com/restforce/restforce/pull/392
• https://github.com/advisories/GHSA-534w-937m-v7x3
• https://github.com/restforce/restforce
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/restforce/CVE-2018-3777.yml

CVE-2018-3777 · published 2018-08-03T21:04:02Z · modified 2024-02-16T08:08:58.530532Z · JSON