CVE-2021-32823

RubyGems/bindata CVE-2021-32823: low 3.7, EPSS 1.87%

Potential Denial-of-Service in bindata

Action: Upgrade bindata to 2.4.10 or later.

bundle update bindata

Affected

Fixed versions

Sources

• osv: GHSA-hj56-84jw-67h6
• https://nvd.nist.gov/vuln/detail/CVE-2021-32823
• https://github.com/rubysec/ruby-advisory-db/issues/476
• https://github.com/dmendel/bindata/commit/d99f050b88337559be2cb35906c1f8da49531323
• https://about.gitlab.com/releases/2021/06/01/security-release-gitlab-13-12-2-released/#update-bindata-dependency
• https://github.com/dmendel/bindata
• https://github.com/dmendel/bindata/blob/master/ChangeLog.rdoc#version-2410-2021-05-18-
• https://github.com/dmendel/bindata/blob/v2.4.10/ChangeLog.rdoc#version-2410-2021-05-18-
• https://rubygems.org/gems/bindata

CVE-2021-32823 · published 2021-06-23T23:42:04Z · modified 2024-11-21T05:24:40.410364Z · JSON