CVE-2024-22048
1 advisory.
RubyGems/govuk_tech_docs CVE-2024-22048: low, EPSS 0.50%
govuk_tech_docs vulnerable to unescaped HTML on search results page
Action: Upgrade govuk_tech_docs to 3.3.1 or later.
bundle update govuk_tech_docsAffected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.2 | 3.3.1 | - |
Fixed versions
| 3.3.1 |
Sources
- osv: GHSA-x2xw-hw8g-6773
- https://github.com/alphagov/tech-docs-gem/security/advisories/GHSA-x2xw-hw8g-6773
- https://nvd.nist.gov/vuln/detail/CVE-2024-22048
- https://github.com/alphagov/tech-docs-gem/pull/323
- https://github.com/alphagov/tech-docs-gem/commit/a51c7058cec46bf2a4e25a1da62b14ac3fd46b53
- https://github.com/alphagov/tech-docs-gem
- https://github.com/alphagov/tech-docs-gem/releases/tag/v3.3.1
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/govuk_tech_docs/CVE-2024-22048.yml
CVE-2024-22048 · published · modified · JSON