RubyGems/octokit CVE-2022-31072: low 2.5, EPSS 0.25%
Octokit gem published with world-writable files
Action: Upgrade octokit to 4.25.0 or later.
bundle update octokitAffected
| introduced | fixed | last affected |
|---|---|---|
| 4.23.0 | 4.25.0 | - |
Fixed versions
| 4.25.0 |
Sources
- osv: GHSA-g28x-pgr3-qqx6
- https://github.com/octokit/octokit.rb/security/advisories/GHSA-g28x-pgr3-qqx6
- https://nvd.nist.gov/vuln/detail/CVE-2022-31072
- https://github.com/octokit/octokit.rb/commit/1c8edecc9cf23d1ceb959d91a416a69f55ce7d55
- https://github.com/octokit/octokit.rb
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/octokit/CVE-2022-31072.yml
CVE-2022-31072 · published · modified · JSON