RubyGems/rubocop CVE-2017-8418: low 3.3, EPSS 0.41%

RuboCop gem Insecure use of /tmp

Action: Upgrade rubocop to 0.49.0 or later.

bundle update rubocop

Affected

Fixed versions

Sources

• osv: GHSA-wmjf-jpjj-9f3j
• https://nvd.nist.gov/vuln/detail/CVE-2017-8418
• https://github.com/bbatsov/rubocop/issues/4336
• https://github.com/rubocop/rubocop/commit/dcb258fabd5f2624c1ea0e1634763094590c09d7
• https://github.com/bbatsov/rubocop
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubocop/CVE-2017-8418.yml
• http://www.openwall.com/lists/oss-security/2017/05/01/14

CVE-2017-8418 · published 2017-11-15T20:39:47Z · modified 2024-02-16T08:14:31.038093Z · JSON