Publify vulnerable to code injection

MEDIO 6.5CVE-2022-0578 · BIT-publify-2022-0578 · GHSA-w78q-4w34-jrjx · Published 16/05/2022 · updated 17/06/2026

En resumen

CVE-2022-0578 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a publify_core, publify (publify project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.91%, mayor que el 60.0% de las vulnerabilidades.
Solución: actualizar a 9.2.8 o posterior.

Package	Affected versions	Patched versions
publify_core RubyGems	`< 9.2.8`	`9.2.8`
publify publify_project	`< 9.2.8`	`9.2.8`

Code Injection in GitHub repository publify/publify prior to 9.2.8.

NVD description

Code Injection in GitHub repository publify/publify prior to 9.2.8.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

RubyGems

< 9.2.8

9.2.8

< 9.2.8

9.2.8

Más vulnerabilidades de publify_core

Ver todo →