Debian/ruby-devise: critical 9.8
Plataformatec Devise version 4.5.0 and earlier, using the lockable module contains a CWE-367 vulnerability in The `Devise::Models::Lockable` class, more specifically at the `#increment_failed_attempts
Action: Upgrade ruby-devise to 4.5.0-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.5.0-3 | - |
Fixed versions
| 4.5.0-3 |
Sources
published · modified · JSON