RubyGems/devise CVE-2019-5421: medium, EPSS 1.56%

devise Time-of-check Time-of-use Race Condition vulnerability

Action: Upgrade devise to 4.6.0 or later.

bundle update devise

Affected

Fixed versions

Sources

• osv: GHSA-73rf-6mrf-759q
• https://nvd.nist.gov/vuln/detail/CVE-2019-5421
• https://github.com/plataformatec/devise/issues/4981
• https://github.com/plataformatec/devise/pull/4996
• https://github.com/plataformatec/devise

CVE-2019-5421 · published 2019-03-19T18:03:25Z · modified 2024-11-30T05:31:04.698625Z · JSON