-
Notifications
You must be signed in to change notification settings - Fork 98
Open
Description
A quick search shows we are still depending on the old vulnerable versions:
===========================================================================
Total: 3 (UNKNOWN: 0, LOW: 1, MEDIUM: 0, HIGH: 2, CRITICAL: 0)
+---------+------------------+----------+-------------------+---------------+---------------------------------------+
| LIBRARY | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION | TITLE |
+---------+------------------+----------+-------------------+---------------+---------------------------------------+
| json | CVE-2020-10663 | HIGH | 2.2.0 | 2.3.0 | rubygem-json: Unsafe Object |
| | | | | | Creation Vulnerability in JSON |
| | | | | | -->avd.aquasec.com/nvd/cve-2020-10663 |
+---------+------------------+ +-------------------+---------------+---------------------------------------+
| rake | CVE-2020-8130 | | 10.5.0 | 12.3.3 | rake: OS Command Injection |
| | | | | | via egrep in Rake::FileList |
| | | | | | -->avd.aquasec.com/nvd/cve-2020-8130 |
+---------+------------------+----------+-------------------+---------------+---------------------------------------+
| rubocop | CVE-2017-8418 | LOW | 0.39.0 | 0.49.0 | RuboCop: insecure use of /tmp |
| | | | | | -->avd.aquasec.com/nvd/cve-2017-8418 |
+---------+------------------+----------+-------------------+---------------+---------------------------------------+
idubinskiy
Metadata
Metadata
Assignees
Labels
No labels