We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 901b57f commit d4bb18eCopy full SHA for d4bb18e
gems/airbrake-ruby/CVE-2019-16060.yml
@@ -0,0 +1,18 @@
1
+---
2
+gem: airbrake-ruby
3
+cve: 2019-16060
4
+date: 2019-04-10
5
+url: https://github.com/airbrake/airbrake-ruby/issues/468
6
+title: Blacklist keys are no longer being filtered in airbrake-ruby
7
+description: |
8
+ A flaw in airbrake-ruby v4.2.3 prevented user data from being filtered
9
+ prior to sending to Airbrake. Such data could be user passwords. Therefore, an app
10
+ could leak user passwords without knowing it.
11
+unaffected_versions:
12
+ - "< 4.2.3"
13
+ - "> 4.2.3"
14
+patched_versions:
15
+ - ">= 4.2.4"
16
+related:
17
+ url:
18
+ - https://github.com/airbrake/airbrake-ruby/pull/469
0 commit comments