RubyGems/activerecord-jdbc-adapter: high

ActiveRecord-JDBC-Adapter (AR-JDBC) lib/arjdbc/jdbc/adapter.rb sql.gsub() Function SQL Injection

Action: Upgrade activerecord-jdbc-adapter to 1.2.8 or later.

bundle update activerecord-jdbc-adapter

Affected

Fixed versions

Sources

• osv: GHSA-5qw5-wf2q-f538
• https://github.com/jruby/activerecord-jdbc-adapter/issues/322
• https://github.com/jruby/activerecord-jdbc-adapter
• https://github.com/jruby/activerecord-jdbc-adapter/blob/master/lib/arjdbc/jdbc/adapter.rb
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord-jdbc-adapter/GHSA-5qw5-wf2q-f538.yml
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord-jdbc-adapter/OSVDB-114854.yml

published 2026-01-16T19:20:40Z · modified 2026-02-03T03:11:34.559768Z · JSON