CVE-2021-3779

RubyGems/ruby-mysql CVE-2021-3779: medium 6.5

Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql

Action: Upgrade ruby-mysql to 2.10.0 or later.

bundle update ruby-mysql

Affected

Fixed versions

Sources

• osv: GHSA-73pr-g6jj-5hc9
• https://nvd.nist.gov/vuln/detail/CVE-2021-3779
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-mysql/CVE-2021-3779.yml
• https://www.rapid7.com/blog/post/2022/06/28/cve-2021-3779-ruby-mysql-gem-client-file-read-fixed
• http://github.com/tmtm/ruby-mysql

CVE-2021-3779 · published 2022-06-29T00:00:27Z · modified 2024-02-21T05:29:44.756734Z · JSON