RubyGems/hub CVE-2014-0177: medium 4.4, EPSS 0.39%

Hub Package Arbitrary File Overwrite

Action: Upgrade hub to 1.12.1 or later.

bundle update hub

Affected

Fixed versions

Sources

• osv: GHSA-x5m6-jh4r-34mv#RubyGems/hub
• https://nvd.nist.gov/vuln/detail/CVE-2014-0177
• https://github.com/github/hub/commit/016ec99d25b1cb83cb4367e541177aa431beb600
• https://github.com/mislav/hub/commit/016ec99d25b1cb83cb4367e541177aa431beb600
• https://github.com/mislav/hub
• https://github.com/mislav/hub/releases/tag/v1.12.1
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/hub/CVE-2014-0177.yml

CVE-2014-0177 · published 2022-02-15T01:07:53Z · modified 2024-02-16T08:03:34.350985Z · JSON