RubyGems/activejob: medium
Active Job - Object injection security vulnerability
Action: Upgrade activejob to 4.2.0.beta2 or later.
bundle update activejobAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.0.beta2 | - |
Fixed versions
| 4.2.0.beta2 |
Sources
- osv: GHSA-mpwp-4h2m-765c
- https://advisories.gitlab.com/pkg/gem/activejob/OSVDB-112347
- https://github.com/rails/rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activejob/GHSA-mpwp-4h2m-765c.yml
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activejob/OSVDB-112347.yml
published · modified · JSON