CVE-2022-46648
1 advisory.
RubyGems/git CVE-2022-46648: high 8, EPSS 1.35%
ruby-git has potential remote code execution vulnerability
Action: Upgrade git to 1.13.0 or later.
bundle update gitAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.13.0 | - |
Fixed versions
| 1.13.0 |
Sources
- osv: GHSA-pfpr-3463-c6jh
- https://nvd.nist.gov/vuln/detail/CVE-2022-46648
- https://github.com/ruby-git/ruby-git/pull/602
- https://github.com/ruby-git/ruby-git
- https://github.com/ruby-git/ruby-git/releases/tag/v1.13.0
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/git/CVE-2022-46648.yml
- https://jvn.jp/en/jp/JVN16765254/index.html
- https://lists.debian.org/debian-lts-announce/2023/01/msg00043.html
CVE-2022-46648 · published · modified · JSON