RubyGems/xapian-core CVE-2018-0499: medium 6.1, EPSS 1.04%
xapian-core Cross-site Scripting vulnerability
Action: Upgrade xapian-core to 1.4.6 or later.
bundle update xapian-coreAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.6 | - |
Fixed versions
| 1.4.6 |
Sources
- osv: GHSA-7qw4-w7hf-22q3
- https://nvd.nist.gov/vuln/detail/CVE-2018-0499
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/xapian-core/CVE-2018-0499.yml
- https://lists.xapian.org/pipermail/xapian-discuss/2018-July/009652.html
- https://trac.xapian.org/wiki/SecurityFixes/2018-07-02
- https://usn.ubuntu.com/3709-1
CVE-2018-0499 · published · modified · JSON