Lack of data validation In ruby
Description
An issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.11 | 2.5.2-r0 | ||
alpine v3.13 | 2.5.2-r0 | ||
alpine v3.22 | 2.5.2-r0 | ||
alpine v3.7 | 2.4.5-r0 | ||
alpine v3.8 | 2.5.2-r0 | ||
alpine v3.16 | 2.5.2-r0 | ||
alpine v3.17 | 2.5.2-r0 | ||
alpine v3.18 | 2.5.2-r0 | ||
alpine v3.19 | 2.5.2-r0 | ||
alpine v3.4 | 2.3.8-r0 |
1-10 of 25
10
Aliases
1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. 15. 16. 17. 18. 19. 20.
References
1. 2.