Skip to content

Commit d4bb18e

Browse files
kyryloreedloden
authored andcommitted
1 parent 901b57f commit d4bb18e

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed

gems/airbrake-ruby/CVE-2019-16060.yml

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
---
2+
gem: airbrake-ruby
3+
cve: 2019-16060
4+
date: 2019-04-10
5+
url: https://github.com/airbrake/airbrake-ruby/issues/468
6+
title: Blacklist keys are no longer being filtered in airbrake-ruby
7+
description: |
8+
A flaw in airbrake-ruby v4.2.3 prevented user data from being filtered
9+
prior to sending to Airbrake. Such data could be user passwords. Therefore, an app
10+
could leak user passwords without knowing it.
11+
unaffected_versions:
12+
- "< 4.2.3"
13+
- "> 4.2.3"
14+
patched_versions:
15+
- ">= 4.2.4"
16+
related:
17+
url:
18+
- https://github.com/airbrake/airbrake-ruby/pull/469

0 commit comments

Comments
 (0)