CVE-2019-18409
1 advisory.
RubyGems/ruby_parser-legacy CVE-2019-18409: high 7.8
Ruby_parser-legacy Incorrect Permission Assignment for Critical Resource
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hhwc-8g49-j8jx
- https://nvd.nist.gov/vuln/detail/CVE-2019-18409
- https://github.com/zenspider/ruby_parser-legacy/issues/1
- https://brakemanscanner.org/blog/2019/10/14/brakeman-4-dot-7-dot-1-released
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/brakeman/CVE-2019-18409.yml
- https://github.com/zenspider/ruby_parser-legacy
CVE-2019-18409 · published · modified · JSON