CVE-2024-47888
1 advisory.
RubyGems/actiontext CVE-2024-47888: medium 6.6, EPSS 0.98%
Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text
Action: Upgrade actiontext to 6.1.7.9 or later.
bundle update actiontextAffected
| introduced | fixed | last affected |
|---|---|---|
| 6.0.0 | 6.1.7.9 | - |
| 7.0.0 | 7.0.8.5 | - |
| 7.1.0 | 7.1.4.1 | - |
| 7.2.0 | 7.2.1.1 | - |
Fixed versions
| 6.1.7.9 | 7.0.8.5 | 7.1.4.1 | 7.2.1.1 |
Sources
- osv: GHSA-wwhv-wxv9-rpgw
- nvd: CVE-2024-47888
- https://github.com/rails/rails/security/advisories/GHSA-wwhv-wxv9-rpgw
- https://github.com/rails/rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actiontext/CVE-2024-47888.yml
CVE-2024-47888 · published · modified · JSON