Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-18299

Низкий

ALT-PU-2024-18299: package gem-yard update to version 0.9.36-alt1

Источник
errata.altlinux.org
Дата публикации
17.03.2024
Дата обновления
17.03.2024
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades gem-yard to version 0.9.36-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 2 лет назад

YARD is a Ruby Documentation tool. The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting (XSS) attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. This vulnerability is fixed in 0.9.36.

CVSS3: 5.4
redhat
больше 2 лет назад

YARD is a Ruby Documentation tool. The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting (XSS) attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. This vulnerability is fixed in 0.9.36.

CVSS3: 6.1
nvd
больше 2 лет назад

YARD is a Ruby Documentation tool. The "frames.html" file within the Yard Doc's generated documentation is vulnerable to Cross-Site Scripting (XSS) attacks due to inadequate sanitization of user input within the JavaScript segment of the "frames.erb" template file. This vulnerability is fixed in 0.9.36.

CVSS3: 6.1
debian
больше 2 лет назад

YARD is a Ruby Documentation tool. The "frames.html" file within the Y ...

CVSS3: 5.4
redos
больше 2 лет назад

Уязвимость rubygem-yard