CVE-2021-4250

RubyGems/active_attr CVE-2021-4250: high 7.5, EPSS 1.18%

active_attr Improper Resource Shutdown or Release vulnerability

Action: Upgrade active_attr to 0.15.4 or later.

bundle update active_attr

Affected

Fixed versions

Sources

• osv: GHSA-4whf-rmx5-8frv
• https://nvd.nist.gov/vuln/detail/CVE-2021-4250
• https://github.com/cgriego/active_attr/issues/184
• https://github.com/cgriego/active_attr/pull/185
• https://github.com/cgriego/active_attr/commit/dab95e5843b01525444b82bd7b336ef1d79377df
• https://github.com/cgriego/active_attr
• https://github.com/cgriego/active_attr/releases/tag/v0.15.3
• https://github.com/cgriego/active_attr/releases/tag/v0.15.4
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/active_attr/CVE-2021-4250.yml
• https://vuldb.com/?id.216207

CVE-2021-4250 · published 2022-12-19T00:30:23Z · modified 2023-11-08T04:07:06.516123Z · JSON