| Package | Affected versions | Patched versions |
|---|---|---|
| ruby | = 2.6.0≥ 2.2.0, < 2.2.10≥ 2.3.0, < 2.3.7≥ 2.4.0, < 2.4.4≥ 2.5.0, < 2.5.1 | 2.2.102.3.72.4.42.5.1 |
In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the UNIXServer.open and UNIXSocket.open methods are not checked for null characters. It may be connected to an unintended socket.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free