CVE-2021-23435

RubyGems/clearance CVE-2021-23435: high 7.6, EPSS 0.70%

Clearance Gem Open Redirect Vulnerability

Action: Upgrade clearance to 2.5.0 or later.

bundle update clearance

Affected

Fixed versions

Sources

• osv: GHSA-4hpq-rjcx-7vj9
• https://nvd.nist.gov/vuln/detail/CVE-2021-23435
• https://github.com/thoughtbot/clearance/pull/945
• https://github.com/advisories/GHSA-4hpq-rjcx-7vj9
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/clearance/CVE-2021-23435.yml
• https://github.com/thoughtbot/clearance
• https://snyk.io/vuln/SNYK-RUBY-CLEARANCE-1577284

CVE-2021-23435 · published 2021-09-13T20:05:09Z · modified 2026-07-08T06:49:52.790771388Z · JSON