CVE-2024-42360

RubyGems/sequenceserver CVE-2024-42360: critical 9.8

Command Injection in sequenceserver

Action: Upgrade sequenceserver to 3.1.2 or later.

bundle update sequenceserver

Affected

Fixed versions

Sources

• osv: GHSA-qv32-5wm2-p32h
• https://github.com/wurmlab/sequenceserver/security/advisories/GHSA-qv32-5wm2-p32h
• https://nvd.nist.gov/vuln/detail/CVE-2024-42360
• https://github.com/wurmlab/sequenceserver/commit/457e52709f7f9ed2fceed59b3db564cb50785dba
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sequenceserver/CVE-2024-42360.yml
• https://github.com/wurmlab/sequenceserver

CVE-2024-42360 · published 2024-08-13T21:01:42Z · modified 2024-08-14T22:21:07.046729Z · JSON