Skip to content

[Snyk] Fix for 39 vulnerabilities - #4

Open
CalinL wants to merge 1 commit into
mainfrom
snyk-fix-22e896833efefca4cff54fda1fac5954
Open

[Snyk] Fix for 39 vulnerabilities#4
CalinL wants to merge 1 commit into
mainfrom
snyk-fix-22e896833efefca4cff54fda1fac5954

Conversation

@CalinL

Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to fix 39 vulnerabilities in the rubygems dependencies of this project.

Snyk changed the following file(s):

  • Gemfile
  • Gemfile.lock

Vulnerabilities that will be fixed with an upgrade:

IssueScore
high severityExpired Pointer Dereference
SNYK-RUBY-NOKOGIRI-10674179
726
high severityStack-based Buffer Overflow
SNYK-RUBY-NOKOGIRI-10674176
721
high severityExpired Pointer Dereference
SNYK-RUBY-NOKOGIRI-10674184
721
high severityOut-of-bounds Read
SNYK-RUBY-NOKOGIRI-10674192
721
high severityHeap-based Buffer Overflow
SNYK-RUBY-NOKOGIRI-7164639
696
high severityStack-based Buffer Overflow
SNYK-RUBY-NOKOGIRI-8732769
671
high severityUse After Free
SNYK-RUBY-NOKOGIRI-8732779
671
medium severityUncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-RUBY-REXML-7577227
666
high severityInteger Overflow or Wraparound
SNYK-RUBY-COMMONMARKER-2415031
654
medium severityDenial of Service (DoS)
SNYK-RUBY-COMMONMARKER-3318400
646
medium severityDenial of Service (DoS)
SNYK-RUBY-COMMONMARKER-5829860
641
medium severityHeap-based Buffer Overflow
SNYK-RUBY-NOKOGIRI-10494060
633
medium severityHeap-based Buffer Overflow
SNYK-RUBY-NOKOGIRI-10494063
633
high severityImproper Handling of Unexpected Data Type
SNYK-RUBY-NOKOGIRI-2840634
624
high severityImproper Restriction of XML External Entity Reference ('XXE')
SNYK-RUBY-REXML-7814166
624
high severityUse After Free
SNYK-RUBY-NOKOGIRI-2413994
619
high severityRegular Expression Denial of Service (ReDoS)
SNYK-RUBY-NOKOGIRI-2620374
589
high severityOut-of-bounds Write
SNYK-RUBY-NOKOGIRI-2630623
589
high severityDenial of Service (DoS)
SNYK-RUBY-NOKOGIRI-2630898
589
high severityNULL Pointer Dereference
SNYK-RUBY-NOKOGIRI-3052880
589
high severityDirectory Traversal
SNYK-RUBY-TZINFO-2958048
589
medium severityDenial of Service (DoS)
SNYK-RUBY-COMMONMARKER-5603112
586
medium severityUse After Free
SNYK-RUBY-NOKOGIRI-9510795
576
medium severityDenial of Service (DoS)
SNYK-RUBY-REXML-7577228
559
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-RUBY-REXML-8309365
559
medium severityDenial of Service (DoS)
SNYK-RUBY-COMMONMARKER-3318401
536
medium severityUse After Free
SNYK-RUBY-NOKOGIRI-6228056
524
medium severityCross-site Scripting (XSS)
SNYK-RUBY-ACTIVESUPPORT-3360028
519
low severityOut-of-bounds Read
SNYK-RUBY-COMMONMARKER-3318398
486
medium severityRegular Expression Denial of Service (ReDoS)
SNYK-RUBY-ACTIVESUPPORT-3237242
479
medium severityDenial of Service (DoS)
SNYK-RUBY-COMMONMARKER-5603111
479
medium severityUncontrolled Resource Consumption
SNYK-RUBY-REXML-6861566
479
medium severityDenial of Service (DoS)
SNYK-RUBY-REXML-7462086
479
medium severityUse After Free
SNYK-RUBY-NOKOGIRI-9510789
469
medium severityInformation Exposure
SNYK-RUBY-ACTIVESUPPORT-5851458
429
medium severityDenial of Service (DoS)
SNYK-RUBY-COMMONMARKER-3318399
429
low severityBuffer Under-read
SNYK-RUBY-NOKOGIRI-9789079
426
low severityStack-based Buffer Overflow
SNYK-RUBY-NOKOGIRI-10674188
376
low severityCross-site Scripting (XSS)
SNYK-RUBY-NOKOGIRI-8453714
319

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Cross-site Scripting (XSS)
🦉 Use After Free
🦉 More lessons are available in Snyk Learn

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674179
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674176
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674184
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674192
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-7164639
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732769
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8732779
- https://snyk.io/vuln/SNYK-RUBY-REXML-7577227
- https://snyk.io/vuln/SNYK-RUBY-COMMONMARKER-2415031
- https://snyk.io/vuln/SNYK-RUBY-COMMONMARKER-3318400
- https://snyk.io/vuln/SNYK-RUBY-COMMONMARKER-5829860
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10494060
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10494063
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2840634
- https://snyk.io/vuln/SNYK-RUBY-REXML-7814166
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2413994
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2620374
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630623
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-2630898
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-3052880
- https://snyk.io/vuln/SNYK-RUBY-TZINFO-2958048
- https://snyk.io/vuln/SNYK-RUBY-COMMONMARKER-5603112
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510795
- https://snyk.io/vuln/SNYK-RUBY-REXML-7577228
- https://snyk.io/vuln/SNYK-RUBY-REXML-8309365
- https://snyk.io/vuln/SNYK-RUBY-COMMONMARKER-3318401
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-6228056
- https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3360028
- https://snyk.io/vuln/SNYK-RUBY-COMMONMARKER-3318398
- https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-3237242
- https://snyk.io/vuln/SNYK-RUBY-COMMONMARKER-5603111
- https://snyk.io/vuln/SNYK-RUBY-REXML-6861566
- https://snyk.io/vuln/SNYK-RUBY-REXML-7462086
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9510789
- https://snyk.io/vuln/SNYK-RUBY-ACTIVESUPPORT-5851458
- https://snyk.io/vuln/SNYK-RUBY-COMMONMARKER-3318399
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-9789079
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-10674188
- https://snyk.io/vuln/SNYK-RUBY-NOKOGIRI-8453714
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@CalinL@snyk-bot