Publish Advisories

GHSA-pcqq-5962-hvcw
GHSA-hw46-3hmr-x9xv
This commit is contained in:
advisory-database[bot]
2025-05-22 17:14:40 +00:00
parent 47578de44e
commit a939da3e28
2 changed files with 10 additions and 2 deletions
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pcqq-5962-hvcw",
"modified": "2020-03-10T16:48:58Z",
"modified": "2025-05-22T17:12:55Z",
"published": "2020-03-10T18:02:49Z",
"aliases": [],
"summary": "Denial of Service in uap-core when processing crafted User-Agent strings",
@@ -36,6 +36,10 @@
{
"type": "WEB",
"url": "https://github.com/ua-parser/uap-ruby/commit/2bb18268f4c5ba7d4ba0e21c296bf6437063da3a"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/user_agent_parser/GHSA-pcqq-5962-hvcw.yml"
}
],
"database_specific": {
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hw46-3hmr-x9xv",
"modified": "2025-03-12T19:42:59Z",
"modified": "2025-05-22T17:13:51Z",
"published": "2025-03-12T19:42:58Z",
"aliases": [],
"summary": "omniauth-saml has dependency on ruby-saml version with Signature Wrapping Attack issue",
@@ -91,6 +91,10 @@
"type": "WEB",
"url": "https://github.com/omniauth/omniauth-saml/blob/master/omniauth-saml.gemspec#L16"
},
{
"type": "WEB",
"url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth-saml/GHSA-hw46-3hmr-x9xv.yml"
},
{
"type": "WEB",
"url": "https://rubygems.org/gems/omniauth-saml/versions/2.2.3"