File tree Expand file tree Collapse file tree 2 files changed +85
-1
lines changed Expand file tree Collapse file tree 2 files changed +85
-1
lines changed Original file line number Diff line number Diff line change 424424 }
425425 ],
426426 "weaknesses" : []
427+ },
428+ {
429+ "vulnerability_id" : null ,
430+ "aliases" : [
431+ " CVE-2022-21831" ,
432+ " GHSA-w749-p3v6-hccq"
433+ ],
434+ "confidence" : 100 ,
435+ "summary" : " Possible code injection vulnerability in Rails / Active Storage" ,
436+ "affected_purls" : [
437+ {
438+ "type" : " gem" ,
439+ "namespace" : null ,
440+ "name" : " activestorage" ,
441+ "version" : " 10.2.1" ,
442+ "qualifiers" : null ,
443+ "subpath" : null
444+ },
445+ {
446+ "type" : " gem" ,
447+ "namespace" : null ,
448+ "name" : " activestorage" ,
449+ "version" : " 10.2.8" ,
450+ "qualifiers" : null ,
451+ "subpath" : null
452+ }
453+ ],
454+ "fixed_purl" : null ,
455+ "references" : [
456+ {
457+ "reference_id" : " " ,
458+ "url" : " https://nvd.nist.gov/vuln/detail/CVE-2022-21831" ,
459+ "severities" : []
460+ },
461+ {
462+ "reference_id" : " " ,
463+ "url" : " https://github.com/rails/rails/commit/0a72f7d670e9aa77a0bb8584cb1411ddabb7546e" ,
464+ "severities" : []
465+ },
466+ {
467+ "reference_id" : " " ,
468+ "url" : " https://groups.google.com/g/rubyonrails-security/c/n-p-W1yxatI" ,
469+ "severities" : []
470+ },
471+ {
472+ "reference_id" : " " ,
473+ "url" : " https://rubysec.com/advisories/CVE-2022-21831/" ,
474+ "severities" : []
475+ },
476+ {
477+ "reference_id" : " GHSA-w749-p3v6-hccq" ,
478+ "url" : " https://github.com/advisories/GHSA-w749-p3v6-hccq" ,
479+ "severities" : [
480+ {
481+ "system" : " cvssv3.1_qr" ,
482+ "value" : " HIGH" ,
483+ "scoring_elements" : " "
484+ }
485+ ]
486+ }
487+ ],
488+ "weaknesses" : []
427489 }
428490]
Original file line number Diff line number Diff line change @@ -172,6 +172,8 @@ def valid_versions():
172172 "6.0.3.4" ,
173173 "6.0.3.rc1" ,
174174 "6.0.2.rc2" ,
175+ "10.2.8" ,
176+ "10.2.1" ,
175177 ]
176178
177179
@@ -203,7 +205,27 @@ def test_github_improver(mock_response, regen=REGEN):
203205 )
204206 ),
205207 fixed_version = None ,
206- )
208+ ),
209+ AffectedPackage (
210+ package = PackageURL (
211+ type = "gem" ,
212+ namespace = None ,
213+ name = "activestorage" ,
214+ version = None ,
215+ qualifiers = {},
216+ subpath = None ,
217+ ),
218+ affected_version_range = GemVersionRange (
219+ constraints = (
220+ VersionConstraint (
221+ comparator = ">=" , version = RubygemsVersion (string = "10.2.0" )
222+ ),
223+ VersionConstraint (
224+ comparator = "<=" , version = RubygemsVersion (string = "10.2.8" )
225+ ),
226+ )
227+ ),
228+ ),
207229 ],
208230 references = [
209231 Reference (
You can’t perform that action at this time.
0 commit comments