CVE-2015-2784

RubyGems/papercrop CVE-2015-2784: critical 9.8

papercrop does not properly handle crop input

Action: Upgrade papercrop to 0.3.0 or later.

bundle update papercrop

Affected

Fixed versions

Sources

• osv: GHSA-m44r-gv6q-9j9r
• https://nvd.nist.gov/vuln/detail/CVE-2015-2784
• https://github.com/rsantamaria/papercrop/commit/b4ecd95debaf0a8712bd1d34def83f41fc6b3579
• https://github.com/rsantamaria/papercrop
• https://github.com/rsantamaria/papercrop/blob/master/CHANGELOG.md

CVE-2015-2784 · published 2022-05-24T17:06:56Z · modified 2023-11-08T03:57:52.294489Z · JSON