CVE-2024-47889
1 advisory.
RubyGems/actionmailer CVE-2024-47889: medium 6.6
Possible ReDoS vulnerability in block_format in Action Mailer
Action: Upgrade actionmailer to 6.1.7.9 or later.
bundle update actionmailerAffected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 6.1.7.9 | - |
| 7.0.0 | 7.0.8.5 | - |
| 7.1.0 | 7.1.4.1 | - |
| 7.2.0 | 7.2.1.1 | - |
Fixed versions
| 6.1.7.9 | 7.0.8.5 | 7.1.4.1 | 7.2.1.1 |
Sources
- osv: GHSA-h47h-mwp9-c6q6
- nvd: CVE-2024-47889
- https://github.com/rails/rails/security/advisories/GHSA-h47h-mwp9-c6q6
- https://github.com/rails/rails
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionmailer/CVE-2024-47889.yml
CVE-2024-47889 · published · modified · JSON