RubyGems/activerecord-tenanted: low
ActiveRecord::Tenanted::Storage::DiskService#path_for has a possible path traversal
Action: Upgrade activerecord-tenanted to 0.7.0 or later.
bundle update activerecord-tenantedAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0 | - |
Fixed versions
| 0.7.0 |
Sources
- osv: GHSA-pmwx-rm49-xv39
- https://github.com/basecamp/activerecord-tenanted/security/advisories/GHSA-pmwx-rm49-xv39
- https://github.com/rails/rails/security/advisories/GHSA-9xrj-h377-fr87
- https://github.com/basecamp/activerecord-tenanted/pull/307
- https://github.com/basecamp/activerecord-tenanted/commit/b242c8ad9bf58bbd7f5a032d153b0f29db54b9ba
- https://github.com/basecamp/activerecord-tenanted
- https://github.com/basecamp/activerecord-tenanted/releases/tag/v0.7.0
published · modified · JSON