New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update sprockets to 3.7.2 to remove the possible vulnerability #15

Merged

ScottBishop merged 2 commits into master from UpdateSprocketsToRemoveVulnerability

Aug 1, 2018

Contributor

ScottBishop commented Aug 1, 2018

https://groups.google.com/forum/#!topic/ruby-security-ann/2S9Pwz2i16k

Specially crafted requests can be used to access files that exists on
the filesystem that is outside an application's root directory, when the Sprockets server is
used in production.

ScottBishop added 2 commits

July 31, 2018 17:06


          Update sprockets to 3.7.2 to remove the possible vulnerability

5041ac7


          Merge branch 'master' into UpdateSprocketsToRemoveVulnerability

2ff69eb

andrewthomas91 approved these changes

View reviewed changes

ScottBishop added the Ready To Merge label

ScottBishop merged commit 347cd15 into master

ScottBishop deleted the UpdateSprocketsToRemoveVulnerability branch

October 10, 2018 19:27

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels