RubyGems/kaminari CVE-2024-32978: medium 6.6, EPSS 0.60%

Kaminari Insecure File Permissions Vulnerability

Action: Upgrade kaminari to 0.16.2 or later.

bundle update kaminari

Affected

Fixed versions

Sources

• osv: GHSA-7r3j-qmr4-jfpj
• https://github.com/kaminari/kaminari/security/advisories/GHSA-7r3j-qmr4-jfpj
• https://nvd.nist.gov/vuln/detail/CVE-2024-32978
• https://github.com/kaminari/kaminari
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kaminari/CVE-2024-32978.yml

CVE-2024-32978 · published 2024-05-28T15:47:00Z · modified 2024-05-31T20:48:57.511032Z · JSON