CVE-2019-16676

RubyGems/simple_form CVE-2019-16676: critical 9.8, EPSS 3.40%

Improper Input Validation in simple_form

Action: Upgrade simple_form to 5.0.0 or later.

bundle update simple_form

Affected

Fixed versions

Sources

• osv: GHSA-r74q-gxcg-73hx
• https://github.com/plataformatec/simple_form/security/advisories/GHSA-r74q-gxcg-73hx
• https://nvd.nist.gov/vuln/detail/CVE-2019-16676
• https://github.com/heartcombo/simple_form/commit/8c91bd76a5052ddf3e3ab9fd8333f9aa7b2e2dd6
• https://github.com/advisories/GHSA-r74q-gxcg-73hx
• https://github.com/heartcombo/simple_form
• https://github.com/plataformatec/simple_form/commits/master
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/simple_form/CVE-2019-16676.yml
• http://blog.plataformatec.com.br/2019/09/incorrect-access-control-in-simple-form-cve-2019-16676

CVE-2019-16676 · published 2019-09-30T19:41:15Z · modified 2026-08-27T03:56:00.389261319Z · JSON