RubyGems/curupira CVE-2015-10053: critical 9.8, EPSS 0.78%

curupira is vulnerable to SQL injection

Action: Upgrade curupira to 0.1.4 or later.

bundle update curupira

Affected

Fixed versions

Sources

• osv: GHSA-85gf-wr67-f83w
• https://nvd.nist.gov/vuln/detail/CVE-2015-10053
• https://github.com/prodigasistemas/curupira/commit/93a9a77896bb66c949acb8e64bceafc74bc8c271
• https://github.com/prodigasistemas/curupira
• https://github.com/prodigasistemas/curupira/releases/tag/v0.1.4
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/curupira/CVE-2015-10053.yml
• https://vuldb.com/?ctiid.218394
• https://vuldb.com/?id.218394

CVE-2015-10053 · published 2023-01-16T12:30:17Z · modified 2023-11-08T03:57:49.273430Z · JSON