[Git][security-tracker-team/security-tracker][master] new rails issue
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Fri Sep 1 09:56:03 BST 2023
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
99fc740f by Moritz Muehlenhoff at 2023-09-01T10:54:57+02:00
new rails issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,7 @@
+CVE-2023-38037
+ - rails <unfixed>
+ NOTE: https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activesupport/CVE-2023-38037.yml
+ NOTE: https://github.com/rails/rails/commit/a21d6edf35a60383dfa6c4da49e4b1aef5f00731
CVE-2023-4698 (Improper Input Validation in GitHub repository usememos/memos prior to ...)
NOT-FOR-US: Memos
CVE-2023-4697 (Improper Privilege Management in GitHub repository usememos/memos prio ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99fc740fd56ded7e2a29dfb34363d481515c3231
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/99fc740fd56ded7e2a29dfb34363d481515c3231
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230901/32f70f4c/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list