Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update gem puma to either '~> 5.6.7', '>= 6.3.1' #1104

Open
Janell-Huyck opened this issue Nov 3, 2023 · 0 comments
Open

Update gem puma to either '~> 5.6.7', '>= 6.3.1' #1104

Janell-Huyck opened this issue Nov 3, 2023 · 0 comments
Labels
Priority: high
Milestone
Security and Main...

Comments

@Janell-Huyck
Copy link
Contributor

Current version in Gemfile: '~> 4.3.8'

bundler-audit message:

Name: puma
Version: 4.3.12
CVE: CVE-2023-40175
GHSA: GHSA-68xg-gqqm-vgj8
Criticality: Medium
URL: GHSA-68xg-gqqm-vgj8
Title: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in puma
Solution: upgrade to '~> 5.6.7', '>= 6.3.1'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Priority: high
Projects
None yet
Milestone
Security and Maintenance
Development

No branches or pull requests
2 participants
@scherztc @Janell-Huyck