RubyGems/spree: medium
Spree: CSV Formula Injection in Customer Export
Action: Upgrade spree to 5.2.8 or later.
bundle update spreeAffected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.0 | 5.2.8 | - |
| 5.3.0 | 5.3.6 | - |
| 5.4.0 | 5.4.3 | - |
Fixed versions
| 5.2.8 | 5.3.6 | 5.4.3 |
Sources
- osv: GHSA-xf4v-w5x5-pv79
- https://github.com/spree/spree/security/advisories/GHSA-xf4v-w5x5-pv79
- https://github.com/spree/spree
- https://github.com/spree/spree/releases/tag/v5.2.8
- https://github.com/spree/spree/releases/tag/v5.3.6
- https://github.com/spree/spree/releases/tag/v5.4.3
published · modified · JSON