CVE-2017-16833

RubyGems/gemirro CVE-2017-16833: medium 6.1

Gemirro Stored XSS in Gemspec "homepage" value

Action: Upgrade gemirro to 0.16.0 or later.

bundle update gemirro

Affected

Fixed versions

Sources

• osv: GHSA-x7p2-x2j6-mwhr
• https://nvd.nist.gov/vuln/detail/CVE-2017-16833
• https://github.com/PierreRambaud/gemirro/commit/9659f9b7ce15a723da8e361bd41b9203b19c97de
• https://github.com/PierreRambaud/gemirro
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gemirro/CVE-2017-16833.yml

CVE-2017-16833 · published 2017-11-29T23:19:51Z · modified 2024-02-16T08:21:57.866595Z · JSON