CVE-2021-35514

RubyGems/narou CVE-2021-35514: high 8.5

Code injection in Narou

Action: Upgrade narou to 3.8.0 or later.

bundle update narou

Affected

Fixed versions

Sources

• osv: GHSA-gwrj-88fp-5m36
• https://nvd.nist.gov/vuln/detail/CVE-2021-35514
• https://github.com/whiteleaf7/narou/commit/d07720e855293182563b749431dfbf6c2d1cdb42
• https://github.com/whiteleaf7/narou
• https://github.com/whiteleaf7/narou/blob/develop/ChangeLog.md#380-20210627
• https://vuln.ryotak.me/advisories/51

CVE-2021-35514 · published 2021-07-02T18:36:01Z · modified 2023-11-08T04:06:10.193384Z · JSON