RubyGems/pageflow: high
Pageflow vulnerable to sensitive user data extraction via Ransack query injection
Action: Upgrade pageflow to 14.5.2 or later.
bundle update pageflowAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 14.5.2 | - |
| 15.0.0 | 15.7.1 | - |
Fixed versions
| 14.5.2 | 15.7.1 |
Sources
- osv: GHSA-wrrw-crp8-979q
- https://github.com/codevise/pageflow/security/advisories/GHSA-wrrw-crp8-979q
- https://github.com/codevise/pageflow/pull/1862
- https://github.com/codevise/pageflow
published · modified · JSON