RubyGems/better_errors CVE-2021-39197: medium 6.3, EPSS 0.64%

Older releases of better_errors open to Cross-Site Request Forgery attack

Action: Upgrade better_errors to 2.8.0 or later.

bundle update better_errors

Affected

Fixed versions

Sources

• osv: GHSA-w3j4-76qw-wwjm
• https://github.com/BetterErrors/better_errors/security/advisories/GHSA-w3j4-76qw-wwjm
• https://nvd.nist.gov/vuln/detail/CVE-2021-39197
• https://github.com/BetterErrors/better_errors/pull/474
• https://github.com/BetterErrors/better_errors/commit/8e8e796bfbde4aa088741823c8a3fc6df2089bb0
• https://github.com/BetterErrors/better_errors
• https://github.com/BetterErrors/better_errors/discussions/507
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/better_errors/CVE-2021-39197.yml

CVE-2021-39197 · published 2021-09-07T23:08:24Z · modified 2026-07-08T06:29:04.043069140Z · JSON