CVE-2022-4064
1 advisory.
RubyGems/dalli CVE-2022-4064: low 3.7, EPSS 1.37%
Unsanitized input leading to code injection in Dalli
Action: Upgrade dalli to 3.2.3 or later.
bundle update dalliAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.3 | - |
Fixed versions
| 3.2.3 |
Sources
- osv: GHSA-3xg8-cc8f-9wv2
- https://nvd.nist.gov/vuln/detail/CVE-2022-4064
- https://github.com/petergoldstein/dalli/issues/932
- https://github.com/petergoldstein/dalli/pull/933
- https://github.com/petergoldstein/dalli/commit/48d594dae55934476fec61789e7a7c3700e0f50d
- https://github.com/petergoldstein/dalli
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/dalli/CVE-2022-4064.yml
- https://vuldb.com/?id.214026
CVE-2022-4064 · published · modified · JSON