ALT-PU-2024-7877: package gem-rails update to version 6.1.7.7-alt1
Описание
This update upgrades gem-rails to version 6.1.7.7-alt1.
Устраненные уязвимости5
Ссылки5
GHSA-4g8v-vg43-wpgf
https://github.com/advisories/GHSA-4g8v-vg43-wpgfGHSA-8h22-8cf7-hq6g
https://github.com/advisories/GHSA-8h22-8cf7-hq6gGHSA-cr5q-6q9f-rq6q
https://github.com/advisories/GHSA-cr5q-6q9f-rq6qGHSA-xp5h-f8jf-rc8q
https://github.com/advisories/GHSA-xp5h-f8jf-rc8qСвязанные уязвимости
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute.
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute.
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasting malicious HTML content from the clipboard that includes a data-method, data-remote or data-disable-with attribute.
There is a potential DOM based cross-site scripting issue in rails-ujs ...
