RubyGems/dragonfly CVE-2021-33473: critical 9.1, EPSS 1.11%

Arbitrary file write in dragonfly

Action: Upgrade dragonfly to 1.4.0 or later.

bundle update dragonfly

Affected

Fixed versions

Sources

• osv: GHSA-fj34-jhjx-xmvv
• https://nvd.nist.gov/vuln/detail/CVE-2021-33473
• https://github.com/markevans/dragonfly/issues/513
• https://github.com/markevans/dragonfly/commit/25399297bb457f7fcf8e3f91e85945b255b111b5
• https://github.com/markevans/dragonfly
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/dragonfly/CVE-2021-33473.yml
• https://security.netapp.com/advisory/ntap-20220715-0004

CVE-2021-33473 · published 2022-06-03T00:00:33Z · modified 2024-02-21T05:37:56.850662Z · JSON