RubyGems/rotp CVE-2024-28862: medium 5.3, EPSS 0.18%

ROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files.

Action: Upgrade rotp to 6.3.0 or later.

bundle update rotp

Affected

Fixed versions

Sources

• osv: GHSA-x2h8-qmj4-g62f
• https://github.com/mdp/rotp/security/advisories/GHSA-x2h8-qmj4-g62f
• https://nvd.nist.gov/vuln/detail/CVE-2024-28862
• https://github.com/mdp/rotp
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rotp/CVE-2024-28862.yml

CVE-2024-28862 · published 2024-03-18T17:21:46Z · modified 2025-12-05T18:51:59.046252Z · JSON