deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-v543-gqhh-6gww
Package: activemodel (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: >= 4.2, <= 4.2.5.0
Patched in: 4.2.5.1

Summary: Duplicate Advisory: Moderate severity vulnerability that affects activemodel

Details:
## Duplicate advisory
This advisory has been withdrawn because it is a duplicate of [GHSA-543v-gj2c-r3ch](https://github.com/advisories/GHSA-543v-gj2c-r3ch). This link is maintained to preserve external references.

## Original Description
Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.
GitHub Security Advisory: GHSA-v543-gqhh-6gww
Package: activemodel (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: >= 4.1.0, <= 4.1.14.0
Patched in: 4.1.14.1

Summary: Duplicate Advisory: Moderate severity vulnerability that affects activemodel

Details:
## Duplicate advisory
This advisory has been withdrawn because it is a duplicate of [GHSA-543v-gj2c-r3ch](https://github.com/advisories/GHSA-543v-gj2c-r3ch). This link is maintained to preserve external references.

## Original Description
Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters.
GitHub Security Advisory: GHSA-fw3g-2h3j-qmm7
Package: sanitize (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 5.0.0, < 6.0.1
Patched in: 6.0.1

Summary: Improper neutralization of `noscript` element content may allow XSS in Sanitize

Details:
### Impact

Using carefully crafted input, an attacker may be able to sneak arbitrary HTML through Sanitize `>= 5.0.0, < 6.0.1` when Sanitize is configured with a custom allowlist that allows `noscript` elements. This could result in XSS (cross-site scripting) or other undesired behavior when that HTML is rendered in a browser.

Sanitize's default configs don't allow `noscript` elements and are not vulnerable. This issue only affects users who are using a custom config that adds `noscript` to the element allowlist.

### Patches

Sanitize `>= 6.0.1` always removes `noscript` elements and their contents, even when `noscript` is in the allowlist.

### Workarounds

Users who are unable to upgrade can prevent this issue by using one of Sanitize's default configs or by ensuring that their custom config does not include `noscript` in the element allowlist.

### Details

The root cause of this issue is that HTML parsing rules treat the contents of a `noscript` element differently depending on whether scripting is enabled in the user agent. Nokogiri (the HTML parser Sanitize uses) doesn't support scripting so it follows the "scripting disabled" rules, but a web browser with scripting enabled will follow the "scripting enabled" rules. This means that Sanitize can't reliably make the contents of a `noscript` element safe for scripting enabled browsers. The safest thing to do is to remove the element and its contents entirely, which is now what Sanitize does in version 6.0.1 and later.

### References

- [Release Notes](https://github.com/rgrove/sanitize/releases/tag/v6.0.1)

### Credit

Thanks to David Klein from [TU Braunschweig](https://www.tu-braunschweig.de/en/ias) (@leeN) for reporting this issue.
GitHub Security Advisory: GHSA-254j-mmc5-qhpx
Package: smashing (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 1.3.5
Patched in: 1.3.5

Summary: Smashing Cross-site Scripting vulnerability

Details:
Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). A URL for a widget can be crafted and used to execute JavaScript on the victim's computer. The JavaScript code can then steal data available in the session/cookies depending on the user environment (e.g. if re-using internal URL's for deploying, or cookies that are very permissive) private information may be retrieved by the attacker.
GitHub Security Advisory: GHSA-5gxp-c379-pj42
Package: ccsv (RUBYGEMS)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-415: Double Free
Vulnerable versions: <= 1.1.0
Patched in: unpatched

Summary: ccsv Double Free vulnerability

Details:
The foreach function in `ext/ccsv.c` in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file.
GitHub Security Advisory: GHSA-cpv6-pfq6-j2v7
Package: katello (RUBYGEMS)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-269: Improper Privilege Management
Vulnerable versions: < 3.17.0.rc1
Patched in: 3.17.0.rc1

Summary: katello Improper Privilege Management vulnerability

Details:
A flaw was found in Foreman's katello plugin version 3.4.5. After setting a new role to allow restricted access on a repository with a filter (filter set on the Product Name), the filter is not respected when the actions are done via hammer using the repository id.
GitHub Security Advisory: GHSA-77h8-xr85-3x5q
Package: hammer_cli_foreman (RUBYGEMS)
Severity: HIGH (CVSS 8.1)
CWE: CWE-295: Improper Certificate Validation, CWE-345: Insufficient Verification of Data Authenticity
Vulnerable versions: < 0.10.0
Patched in: 0.10.0

Summary: hammer_cli_foreman Improper Certificate Validation vulnerability

Details:
Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middle attacks.
GitHub Security Advisory: GHSA-8xm3-gm7c-5fjx
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: = 1.4.0-beta.1
Patched in: 1.4.0-beta.2

Summary: Ember.js Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is set to a user-supplied primitive value and also contain the `{{this}}` special Handlebars variable.
GitHub Security Advisory: GHSA-8xm3-gm7c-5fjx
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 1.3.0.beta.1, < 1.3.1
Patched in: 1.3.1

Summary: Ember.js Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is set to a user-supplied primitive value and also contain the `{{this}}` special Handlebars variable.
GitHub Security Advisory: GHSA-8xm3-gm7c-5fjx
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 1.2.0.beta.1, < 1.2.1
Patched in: 1.2.1

Summary: Ember.js Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is set to a user-supplied primitive value and also contain the `{{this}}` special Handlebars variable.
GitHub Security Advisory: GHSA-8xm3-gm7c-5fjx
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 1.1.0, < 1.1.3
Patched in: 1.1.3

Summary: Ember.js Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is set to a user-supplied primitive value and also contain the `{{this}}` special Handlebars variable.
GitHub Security Advisory: GHSA-8xm3-gm7c-5fjx
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 1.0.0.pre4.0, < 1.0.1
Patched in: 1.0.1

Summary: Ember.js Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application that contains templates whose context is set to a user-supplied primitive value and also contain the `{{this}}` special Handlebars variable.
GitHub Security Advisory: GHSA-mc8m-x6hf-cw2g
Package: point-cli (RUBYGEMS)
Severity: HIGH (CVSS 7.8)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: <= 0.0.1
Patched in: unpatched

Summary: point-cli allows local users to obtain sensitive information by listing the process

Details:
`lib/commands/setup.rb` in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process.
GitHub Security Advisory: GHSA-x4vj-279x-qwf2
Package: VladTheEnterprising (RUBYGEMS)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-59: Improper Link Resolution Before File Access ('Link Following')
Vulnerable versions: <= 0.2
Patched in: unpatched

Summary: VladTheEnterprising allows local users to write to arbitrary files via a symlink attack

Details:
`lib/vlad/dba/mysql.rb` in the VladTheEnterprising gem 0.2 for Ruby allows local users to write to arbitrary files via a symlink attack on `/tmp/my.cnf.#{target_host}`.
GitHub Security Advisory: GHSA-vr22-43gj-rx3f
Package: omniauth-weibo-oauth2 (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: >= 0.4.6, < 0.5.1
Patched in: 0.5.1

Summary: omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party

Details:
The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected.
GitHub Security Advisory: GHSA-jp57-9j37-5476
Package: spree_auth_devise (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: >= 1.0.0, < 3.0.5
Patched in: 3.0.5

Summary: spree_auth_devise allows remote authenticated users to assign themselves arbitrary roles

Details:
`app/models/spree/user.rb` in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to assign arbitrary roles to themselves.
GitHub Security Advisory: GHSA-7qw4-w7hf-22q3
Package: xapian-core (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 1.4.6
Patched in: 1.4.6

Summary: xapian-core Cross-site Scripting vulnerability

Details:
A cross-site scripting vulnerability in `queryparser/termgenerator_internal.cc` in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by `Xapian::MSet::snippet()`.
GitHub Security Advisory: GHSA-mhhc-r88h-2qrm
Package: katello (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 3.9.0
Patched in: 3.9.0

Summary: katello Cross-site Scripting vulnerability

Details:
A cross-site scripting (XSS) flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to malicious code execution and extraction of the anti-CSRF token of higher privileged users. Versions before 3.9.0 are vulnerable.
GitHub Security Advisory: GHSA-rcx6-7jp6-pqf2
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: = 1.4.0-beta.1
Patched in: 1.4.0-beta.2

Summary: ember-source Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the `{{group}}` Helper and a crafted payload.
GitHub Security Advisory: GHSA-rcx6-7jp6-pqf2
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 1.3.0.beta.1, < 1.3.1
Patched in: 1.3.1

Summary: ember-source Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the `{{group}}` Helper and a crafted payload.
GitHub Security Advisory: GHSA-rcx6-7jp6-pqf2
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 1.2.0.beta.1, < 1.2.1
Patched in: 1.2.1

Summary: ember-source Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the `{{group}}` Helper and a crafted payload.
GitHub Security Advisory: GHSA-rcx6-7jp6-pqf2
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 1.1.0, < 1.1.3
Patched in: 1.1.3

Summary: ember-source Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the `{{group}}` Helper and a crafted payload.
GitHub Security Advisory: GHSA-rcx6-7jp6-pqf2
Package: ember-source (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 1.0.0.pre4.0, < 1.0.1
Patched in: 1.0.1

Summary: ember-source Cross-site Scripting vulnerability

Details:
Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application using the `{{group}}` Helper and a crafted payload.
GitHub Security Advisory: GHSA-cc8c-26rj-v2vx
Package: administrate (RUBYGEMS)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: < 0.1.5
Patched in: 0.1.5

Summary: administrate vulnerable to Cross-Site Request Forgery

Details:
Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth autorization code.
GitHub Security Advisory: GHSA-jx5v-788g-qw58
Package: katello (RUBYGEMS)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE-209: Generation of Error Message Containing Sensitive Information
Vulnerable versions: <= 3.10
Patched in: unpatched

Summary: katello SQL Injection vulnerability

Details:
A SQL injection flaw was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072. Version 3.10 and older is vulnerable.
GitHub Security Advisory: GHSA-f489-655r-x6gr
Package: smalruby (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: < 0.1.11
Patched in: 0.1.11

Summary: smalruby and smalruby-editor vulnerable to OS Command Injection

Details:
smalruby-editor prior to 0.4.1 and smalruby prior to 0.1.11 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
GitHub Security Advisory: GHSA-f489-655r-x6gr
Package: smalruby-editor (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: < 0.4.1
Patched in: 0.4.1

Summary: smalruby and smalruby-editor vulnerable to OS Command Injection

Details:
smalruby-editor prior to 0.4.1 and smalruby prior to 0.1.11 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
GitHub Security Advisory: GHSA-98wx-cw86-c97x
Package: mixlib-archive (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: < 0.4.0
Patched in: 0.4.0

Summary: mixlib-archive Path Traversal vulnerability

Details:
Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using `..` in tar archive entries
GitHub Security Advisory: GHSA-86cf-g34f-7462
Package: VladTheEnterprising (RUBYGEMS)
Severity: HIGH (CVSS 7.0)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: <= 0.2
Patched in: unpatched

Summary: VladTheEnterprising allows local users to obtain sensitive information by reading MySQL root password from temporary file

Details:
Race condition in `lib/vlad/dba/mysql.rb` in the VladTheEnterprising gem 0.2 for Ruby allows local users to obtain sensitive information by reading the MySQL root password from a temporary file before it is removed.
GitHub Security Advisory: GHSA-5g7f-p7jg-v6mv
Package: lean-ruport (RUBYGEMS)
Severity: HIGH (CVSS 7.8)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: <= 0.3.8
Patched in: unpatched

Summary: lean-ruport allows local users to obtain sensitive information by listing the process

Details:
`test/tc_database.rb` in the lean-ruport gem 0.3.8 for Ruby places the mysql user password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
GitHub Security Advisory: GHSA-4ph7-5c44-pppv
Package: kajam (RUBYGEMS)
Severity: HIGH (CVSS 7.8)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: <= 1.0.3.rc2
Patched in: unpatched

Summary: kajam allows local users to obtain sensitive information by listing the process

Details:
`vendor/plugins/dataset/lib/dataset/database/mysql.rb` in the kajam gem 1.0.3.rc2 for Ruby places the mysql user password on the (1) mysqldump command line in the capture function and (2) mysql command line in the restore function, which allows local users to obtain sensitive information by listing the process.
GitHub Security Advisory: GHSA-rx7j-mw4c-76g9
Package: authlogic (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: < 3.3.0
Patched in: 3.3.0

Summary: Authlogic Information Exposure vulnerability

Details:
The Authlogic gem for Ruby on Rails prior to version 3.3.0 makes potentially unsafe `find_by_id` method calls, which might allow remote attackers to conduct CVE-2012-6496 SQL injection attacks via a crafted parameter in environments that have a known secret_token value, as demonstrated by a value contained in `secret_token.rb` in an open-source product.
GitHub Security Advisory: GHSA-x78v-4fvj-rg9j
Package: camaleon_cms (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 0.0.1, < 2.6.0.1
Patched in: 2.6.0.1

Summary: Camaleon CMS Stored Cross-site Scripting vulnerability

Details:
In “Camaleon CMS” application, versions 0.0.1 through 2.6.0 are vulnerable to stored XSS, that allows unprivileged application users to store malicious scripts in the comments section of the post. These scripts are executed in a victim’s browser when they open the page containing the malicious comment.
GitHub Security Advisory: GHSA-33vg-hpx5-pfxg
Package: omniauth-facebook (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-287: Improper Authentication
Vulnerable versions: < 1.5.1
Patched in: 1.5.1

Summary: omniauth-facebook Improper Authentication vulnerability

Details:
RubyGem omniauth-facebook has an access token security vulnerability.
GitHub Security Advisory: GHSA-9whh-582r-589h
Package: ldap_fluff (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
Vulnerable versions: < 0.4.0
Patched in: 0.4.0

Summary: ldap_fluff authentication bypass

Details:
The ldap_fluff gem for Ruby, as used in Red Hat CloudForms 1.1, when using Active Directory for authentication, allows remote attackers to bypass authentication via unspecified vectors.
GitHub Security Advisory: GHSA-vx6p-q4gj-x6xx
Package: camaleon_cms (RUBYGEMS)
Severity: MODERATE (CVSS 4.9)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: >= 2.1.2.0, < 2.6.0.1
Patched in: 2.6.0.1

Summary: Camaleon CMS vulnerable to Server-Side Request Forgery

Details:
In Camaleon CMS, versions 2.1.2.0 through 2.6.0, are vulnerable to Server-Side Request Forgery (SSRF) in the media upload feature, which allows admin users to fetch media files from external URLs but fails to validate URLs referencing to localhost or other internal servers. This allows attackers to read files stored in the internal server.
GitHub Security Advisory: GHSA-h29f-7f56-j8wh
Package: sinatra (RUBYGEMS)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: >= 2.0.0.beta1, < 2.0.1
Patched in: 2.0.1

Summary: Sinatra Path Traversal vulnerability

Details:
An issue was discovered in `rack-protection/lib/rack/protection/path_traversal.rb` in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backslash characters.
GitHub Security Advisory: GHSA-pphf-gfrm-v32r
Package: git (RUBYGEMS)
Severity: HIGH (CVSS 8.0)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: < 1.13.0
Patched in: 1.13.0

Summary: Code injection in ruby git

Details:
ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.
GitHub Security Advisory: GHSA-mmmm-chjf-jmvw
Package: gitaly (RUBYGEMS)
Severity: LOW (CVSS 3.2)
CWE: CWE-613: Insufficient Session Expiration
Vulnerable versions: >= 13.5, < 13.5.2
Patched in: 13.5.2

Summary: Gitaly Insufficient Session Expiration vulnerability

Details:
When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above. Affected versions are: >=1.79.0, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.