safemode gem allows context-dependent attackers to obtain sensitive information via the inspect method (GHSA-c92m-rrrc-q5wf)
Published: 2017-10-24T18:33:35Z
Aliases: CVE-2016-3693
Severity: HIGH · CWE: CWE-200

The Safemode gem before 1.2.4 for Ruby, when initialized with a delegate object that is a Rails controller, allows context-dependent attackers to obtain sensitive information via the inspect method.

Affected packages:
package: ecosystem: RubyGems
name: safemode
ranges: type: ECOSYSTEM
events: introduced: 0
fixed: 1.2.4