| Package | Affected versions | Patched versions |
|---|---|---|
| cgi | ≥ 0.2.0, < 0.2.1≥ 0.3.0, < 0.3.1< 0.1.0.1 | 0.2.10.3.10.1.0.1 |
| cgi | ≤ 0.1.0≤ 0.2.0< 0.3.1 | 0.3.1 |
A buffer overrun vulnerability was discovered in CGI.escape_html. This can lead to a buffer overflow when a user passes a very large string (> 700 MB) to CGI.escape_html on a platform where long type takes 4 bytes, typically, Windows.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free