From 7ade20f0aab172dac208f487be0033c75f131f62 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 22 Jan 2025 15:11:18 +0000 Subject: [PATCH] Publish GHSA-92w9-2pqw-rhjj --- .../GHSA-92w9-2pqw-rhjj.json | 31 +++++++++++++++++-- 1 file changed, 29 insertions(+), 2 deletions(-) diff --git a/advisories/github-reviewed/2017/10/GHSA-92w9-2pqw-rhjj/GHSA-92w9-2pqw-rhjj.json b/advisories/github-reviewed/2017/10/GHSA-92w9-2pqw-rhjj/GHSA-92w9-2pqw-rhjj.json index f273db79c04..53d925803a7 100644 --- a/advisories/github-reviewed/2017/10/GHSA-92w9-2pqw-rhjj/GHSA-92w9-2pqw-rhjj.json +++ b/advisories/github-reviewed/2017/10/GHSA-92w9-2pqw-rhjj/GHSA-92w9-2pqw-rhjj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-92w9-2pqw-rhjj", - "modified": "2023-01-23T16:31:49Z", + "modified": "2025-01-22T15:09:51Z", "published": "2017-10-24T18:33:38Z", "aliases": [ "CVE-2012-3424" @@ -20,7 +20,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "3.0.0.beta" }, { "fixed": "3.0.16" @@ -66,6 +66,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "RubyGems", + "name": "actionpack" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "2.3.5" + } + ] + } + ] } ], "references": [ @@ -73,6 +92,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3424" }, + { + "type": "WEB", + "url": "https://github.com/rails/rails/commit/3719bd3e95523c5518507dbe44f260f252930600" + }, + { + "type": "PACKAGE", + "url": "https://github.com/rails/rails" + }, { "type": "WEB", "url": "https://groups.google.com/group/rubyonrails-security/msg/244d32f2fa25147d?hl=en&dmode=source&output=gplain"