Bump rake from 10.5 to 12.3 to address CVE-2020-8130 #78

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

raw-cs wants to merge 1 commit into rdp:master from raw-cs:raw-CVE-2020-8130

raw-cs commented Aug 27, 2024

Addresses CVE-2020-8130

There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character \|.


          Bump rake 12.3 to address CVE-2020-8130

1b9a1ee

raw-cs changed the title ~~Bump rake 12.3 to address CVE-2020-8130~~ Bump rake from 10.5 to 12.3 to address CVE-2020-8130

fugufish commented Aug 28, 2024

lol you beat me to it, but I bumped it on mine up to 13 so mine is better than yours.

fugufish mentioned this pull request

modernize Gemfile, update Rake as locked version has a vulnerability #79

Closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet