deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-mmmm-chjf-jmvw
Package: gitaly (RUBYGEMS)
Severity: LOW (CVSS 3.2)
CWE: CWE-613: Insufficient Session Expiration
Vulnerable versions: >= 13.4, < 13.4.5
Patched in: 13.4.5

Summary: Gitaly Insufficient Session Expiration vulnerability

Details:
When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above. Affected versions are: >=1.79.0, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
GitHub Security Advisory: GHSA-mmmm-chjf-jmvw
Package: gitaly (RUBYGEMS)
Severity: LOW (CVSS 3.2)
CWE: CWE-613: Insufficient Session Expiration
Vulnerable versions: >= 1.79.0, < 13.3.9
Patched in: 13.3.9

Summary: Gitaly Insufficient Session Expiration vulnerability

Details:
When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above. Affected versions are: >=1.79.0, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.5.2.
GitHub Security Advisory: GHSA-qc9p-mjxm-j2wj
Package: asciidoctor (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Vulnerable versions: < 1.5.8
Patched in: 1.5.8

Summary: Asciidoctor Infinite Loop vulnerability

Details:
Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop). The loop was caused by the fact that `Parser.next_block` was not exhausting all the lines in the reader as the while loop expected it would. This was happening because the regular expression that detects any list was not agreeing with the regular expression that detects a specific list type. So the line kept getting pushed back onto the reader, hence causing the loop.
GitHub Security Advisory: GHSA-636f-xm5j-pj9m
Package: commonmarker (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: < 0.23.7
Patched in: 0.23.7

Summary: Several quadratic complexity bugs may lead to denial of service in Commonmarker

Details:
## Impact

Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to unbounded resource exhaustion and subsequent denial of service.

The following vulnerabilities were addressed:

* [CVE-2023-22483](https://github.com/github/cmark-gfm/security/advisories/GHSA-29g3-96g3-jg6c)
* [CVE-2023-22484](https://github.com/github/cmark-gfm/security/advisories/GHSA-24f7-9frr-5h2r)
* [CVE-2023-22485](https://github.com/github/cmark-gfm/security/advisories/GHSA-c944-cv5f-hpvr)
* [CVE-2023-22486](https://github.com/github/cmark-gfm/security/advisories/GHSA-r572-jvj2-3m8p)

For more information, consult the release notes for version [`0.23.0.gfm.7`](https://github.com/github/cmark-gfm/releases/tag/0.29.0.gfm.7).

## Mitigation

Users are advised to upgrade to commonmarker version [`0.23.7`](https://rubygems.org/gems/commonmarker/versions/0.23.7).
GitHub Security Advisory: GHSA-qwgm-mxm4-3q2c
Package: net-ldap (RUBYGEMS)
Severity: MODERATE (CVSS 5.5)
CWE: CWE-916: Use of Password Hash With Insufficient Computational Effort
Vulnerable versions: < 0.16.2
Patched in: 0.16.2

Summary: net-ldap has weak salt when generating passwords

Details:
The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords.
GitHub Security Advisory: GHSA-m44r-gv6q-9j9r
Package: papercrop (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: < 0.3.0
Patched in: 0.3.0

Summary: papercrop does not properly handle crop input

Details:
The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input.
GitHub Security Advisory: GHSA-7f84-9cqf-g4j9
Package: camaleon_cms (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: = 2.4
Patched in: unpatched

Summary: Camaleon CMS vulnerable to Stored Cross-site Scripting

Details:
In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via `/admin/media/upload?actions=false`.
GitHub Security Advisory: GHSA-5jrp-w8fr-mrww
Package: fluentd (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
Vulnerable versions: >= 0.12.29, < 0.12.41
Patched in: 0.12.41

Summary: Fluentd Escape Sequence Injection Vulnerability

Details:
Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.
GitHub Security Advisory: GHSA-438x-2p9v-g8h9
Package: camaleon_cms (RUBYGEMS)
Severity: HIGH (CVSS 8.8)
CWE: CWE-613: Insufficient Session Expiration
Vulnerable versions: >= 0.1.7, < 2.6.0.1
Patched in: 2.6.0.1

Summary: Camaleon CMS Insufficient Session Expiration vulnerability

Details:
Camaleon CMS 0.1.7 through 2.6.0 doesn’t terminate the active session of the users, even after the admin changes the user’s password. A user that was already logged in, will still have access to the application even after the password was changed. Resolved in commit `77e31bc6cdde7c951fba104aebcd5ebb3f02b030` which is included in the `2.6.0.1` release.
GitHub Security Advisory: GHSA-r2w2-h6r8-3r53
Package: camaleon_cms (RUBYGEMS)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-248: Uncaught Exception
Vulnerable versions: >= 2.0.1, < 2.6.0.1
Patched in: 2.6.0.1

Summary: Camaleon CMS vulnerable to Uncaught Exception

Details:
In Camaleon CMS, versions 2.0.1 through 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file.
GitHub Security Advisory: GHSA-rc42-jghf-vr8f
Package: publify_core (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-190: Integer Overflow or Wraparound
Vulnerable versions: < 9.2.10
Patched in: 9.2.10

Summary: Integer overflow in publify_core

Details:
Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10 due to an unlimited length user name field.
GitHub Security Advisory: GHSA-wcfx-3m6v-4frg
Package: fat_free_crm (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 0.11.1, < 0.13.3
Patched in: 0.13.3

Summary: Fat Free CRM subject to Cross-site Scripting

Details:
Multiple cross-site scripting (XSS) vulnerabilities in `app/views/layouts/application.html.haml` in Fat Free CRM before 0.13.3 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name in a (a) create or (b) edit user action.
GitHub Security Advisory: GHSA-f25h-3mj6-4jpg
Package: fat_free_crm (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: < 0.12.1
Patched in: 0.12.1

Summary: Fat Free CRM vulnerable to Exposure of Sensitive Information

Details:
Fat Free CRM before 0.12.1 does not restrict XML serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for `users/1.xml`, a different vulnerability than CVE-2013-7224.
GitHub Security Advisory: GHSA-9ggp-5rf4-x7q9
Package: fat_free_crm (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: < 0.12.1
Patched in: 0.12.1

Summary: Fat Free CRM vulnerable to SQL Injection

Details:
Multiple SQL injection vulnerabilities in `app/controllers/home_controller.rb` in Fat Free CRM before 0.12.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the homepage timeline feature or (2) the activity feature.
GitHub Security Advisory: GHSA-4xq9-vw89-p5cx
Package: fat_free_crm (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: < 0.12.1
Patched in: 0.12.1

Summary: Fat Free CRM allows remote attackers to obtain sensitive information via a direct request

Details:
Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for `users/1.json`.
GitHub Security Advisory: GHSA-mcvq-7xjq-46x6
Package: fat_free_crm (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: < 0.12.1
Patched in: 0.12.1

Summary: Fat Free CRM contains Cross-site Request Forgery vulnerablilities

Details:
Multiple cross-site request forgery (CSRF) vulnerabilities in Fat Free CRM before 0.12.1 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to the lack of a `protect_from_forgery` line in `app/controllers/application_controller.rb`.
GitHub Security Advisory: GHSA-wx7c-8j35-mpg8
Package: fat_free_crm (RUBYGEMS)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: < 0.13.6
Patched in: 0.13.6

Summary: Fat Free CRM Cross-Site Request Forgery vulnerability

Details:
Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery (CSRF) attacks via a request without the authenticity_token, as demonstrated by a crafted HTML page that creates a new administrator account.
GitHub Security Advisory: GHSA-wr5j-q359-6vr2
Package: backup_checksum (RUBYGEMS)
Severity: HIGH (CVSS 7.8)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: <= 3.0.23
Patched in: unpatched

Summary: backup-agoddard and backup_checksum have Information Exposure vulnerability

Details:
(1) `lib/backup/cli/utility.rb` in the `backup-agoddard` gem 3.0.28 and (2) `lib/backup/cli/utility.rb` in the `backup_checksum` gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process.
GitHub Security Advisory: GHSA-wr5j-q359-6vr2
Package: backup-agoddard (RUBYGEMS)
Severity: HIGH (CVSS 7.8)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: <= 3.0.28
Patched in: unpatched

Summary: backup-agoddard and backup_checksum have Information Exposure vulnerability

Details:
(1) `lib/backup/cli/utility.rb` in the `backup-agoddard` gem 3.0.28 and (2) `lib/backup/cli/utility.rb` in the `backup_checksum` gem 3.0.23 for Ruby place credentials on the openssl command line, which allows local users to obtain sensitive information by listing the process.
GitHub Security Advisory: GHSA-79wq-g4v9-gfj4
Package: publify_core (RUBYGEMS)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-922: Insecure Storage of Sensitive Information
Vulnerable versions: < 9.2.10
Patched in: 9.2.10

Summary: Publify Core does not strip metadata from images

Details:
Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.
GitHub Security Advisory: GHSA-q3rm-f527-ghxj
Package: publify_core (RUBYGEMS)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: < 9.2.10
Patched in: 9.2.10

Summary: Publify Improper Input Validation vulnerability

Details:
Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.
GitHub Security Advisory: GHSA-q95h-cqrv-8jv5
Package: exiftool_vendored (RUBYGEMS)
Severity: HIGH (CVSS 7.8)
CWE: CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Vulnerable versions: < 12.25.0
Patched in: 12.25.0

Summary: ExifTool vulnerable to arbitrary code execution

Details:
### Impact
Arbitrary code execution can occur when running `exiftool` against files with hostile metadata payloads

### Patches
ExifTool has already been patched in version 12.24. `exiftool_vendored.rb`, which vendors ExifTool, includes this patch in [v12.25.0](https://github.com/exiftool-rb/exiftool_vendored.rb/releases/tag/v12.25.0).

### Workarounds
No

### References
https://twitter.com/wcbowling/status/[PII_REDACTED]21415687
https://nvd.nist.gov/vuln/detail/CVE-2021-22204

### For more information
If you have any questions or comments about this advisory:

Open an issue in [exiftool_vendored.rb](https://github.com/exiftool-rb/exiftool_vendored.rb/issues)
GitHub Security Advisory: GHSA-9445-4cr6-336r
Package: actionpack (RUBYGEMS)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: >= 7.0.0, < 7.0.4.1
Patched in: 7.0.4.1

Summary: Open Redirect Vulnerability in Action Pack

Details:
There is a vulnerability in Action Controller’s redirect_to. This vulnerability has been assigned the CVE identifier CVE-2023-22797.

Versions Affected: >= 7.0.0 Not affected: < 7.0.0 Fixed Versions: 7.0.4.1
Impact 

There is a possible open redirect when using the redirect_to helper with untrusted user input.

Vulnerable code will look like this:
```
redirect_to(params[:some_param])
```

Rails 7.0 introduced protection against open redirects from calling redirect_to with untrusted user input. In prior versions the developer was fully responsible for only providing trusted input. However the check introduced could be bypassed by a carefully crafted URL.

All users running an affected release should either upgrade or use one of the workarounds immediately.
Releases

The FIXED releases are available at the normal locations.
Workarounds

There are no feasible workarounds for this issue.
Patches

To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

    7-0-Fix-sec-issue-with-_url_host_allowed.patch - Patch for 7.0 series

Please note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.
GitHub Security Advisory: GHSA-8xww-x3g3-6jcv
Package: actionpack (RUBYGEMS)
Severity: LOW (CVSS 0.0)
CWE: CWE-1333: Inefficient Regular Expression Complexity
Vulnerable versions: >= 7.0.0, < 7.0.4.1
Patched in: 7.0.4.1

Summary: ReDoS based DoS vulnerability in Action Dispatch

Details:
There is a possible regular expression based DoS vulnerability in Action Dispatch related to the If-None-Match header. This vulnerability has been assigned the CVE identifier CVE-2023-22795.

Versions Affected: All Not affected: None Fixed Versions: 5.2.8.15 (Rails LTS), 6.1.7.1, 7.0.4.1

Impact

A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, when on a version of Ruby below 3.2.0. This can cause the process to use large amounts of CPU and memory, leading to a possible DoS vulnerability All users running an affected release should either upgrade or use one of the workarounds immediately.
Releases

The FIXED releases are available at the normal locations.
Workarounds

We recommend that all users upgrade to one of the FIXED versions. In the meantime, users can mitigate this vulnerability by using a load balancer or other device to filter out malicious If-None-Match headers before they reach the application.

Users on Ruby 3.2.0 or greater are not affected by this vulnerability.
Patches

To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

    6-1-Avoid-regex-backtracking-on-If-None-Match-header.patch - Patch for 6.1 series
    7-0-Avoid-regex-backtracking-on-If-None-Match-header.patch - Patch for 7.0 series

Please note that only the 7.0.Z and 6.1.Z series are supported at present, and 6.0.Z for severe vulnerabilities. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.
GitHub Security Advisory: GHSA-65f5-mfpf-vfhj
Package: rack (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-1333: Inefficient Regular Expression Complexity
Vulnerable versions: >= 3.0.0.0, < 3.0.4.1
Patched in: 3.0.4.1

Summary: Denial of service via header parsing in Rack

Details:
There is a possible denial of service vulnerability in the Range header parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2022-44570.

Versions Affected: >= 1.5.0 Not affected: None. Fixed Versions: 2.0.9.2, 2.1.4.2, 2.2.6.2, 3.0.0.1
Impact

Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted.
Releases

The fixed releases are available at the normal locations.
Workarounds

There are no feasible workarounds for this issue.
Patches

To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

    2-0-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.0 series
    2-1-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.1 series
    2-2-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.2 series
    3-0-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 3.0 series
GitHub Security Advisory: GHSA-65f5-mfpf-vfhj
Package: rack (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-1333: Inefficient Regular Expression Complexity
Vulnerable versions: >= 2.2.0.0, < 2.2.6.2
Patched in: 2.2.6.2

Summary: Denial of service via header parsing in Rack

Details:
There is a possible denial of service vulnerability in the Range header parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2022-44570.

Versions Affected: >= 1.5.0 Not affected: None. Fixed Versions: 2.0.9.2, 2.1.4.2, 2.2.6.2, 3.0.0.1
Impact

Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted.
Releases

The fixed releases are available at the normal locations.
Workarounds

There are no feasible workarounds for this issue.
Patches

To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

    2-0-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.0 series
    2-1-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.1 series
    2-2-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.2 series
    3-0-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 3.0 series
GitHub Security Advisory: GHSA-65f5-mfpf-vfhj
Package: rack (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-1333: Inefficient Regular Expression Complexity
Vulnerable versions: >= 2.1.0.0, < 2.1.4.2
Patched in: 2.1.4.2

Summary: Denial of service via header parsing in Rack

Details:
There is a possible denial of service vulnerability in the Range header parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2022-44570.

Versions Affected: >= 1.5.0 Not affected: None. Fixed Versions: 2.0.9.2, 2.1.4.2, 2.2.6.2, 3.0.0.1
Impact

Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted.
Releases

The fixed releases are available at the normal locations.
Workarounds

There are no feasible workarounds for this issue.
Patches

To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

    2-0-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.0 series
    2-1-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.1 series
    2-2-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.2 series
    3-0-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 3.0 series
GitHub Security Advisory: GHSA-65f5-mfpf-vfhj
Package: rack (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-1333: Inefficient Regular Expression Complexity
Vulnerable versions: >= 1.5.0, < 2.0.9.2
Patched in: 2.0.9.2

Summary: Denial of service via header parsing in Rack

Details:
There is a possible denial of service vulnerability in the Range header parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2022-44570.

Versions Affected: >= 1.5.0 Not affected: None. Fixed Versions: 2.0.9.2, 2.1.4.2, 2.2.6.2, 3.0.0.1
Impact

Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vector. Any applications that deal with Range requests (such as streaming applications, or applications that serve files) may be impacted.
Releases

The fixed releases are available at the normal locations.
Workarounds

There are no feasible workarounds for this issue.
Patches

To aid users who aren’t able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.

    2-0-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.0 series
    2-1-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.1 series
    2-2-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 2.2 series
    3-0-Fix-ReDoS-in-Rack-Utils.get_byte_ranges.patch - Patch for 3.0 series
GitHub Security Advisory: GHSA-pfpr-3463-c6jh
Package: git (RUBYGEMS)
Severity: HIGH (CVSS 8.0)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: >= 1.2.0, < 1.13.0
Patched in: 1.13.0

Summary: ruby-git has potential remote code execution vulnerability

Details:
The git gem, between versions 1.2.0 and 1.12.0, incorrectly parsed the output of the `git ls-files` command using `eval()` to unescape quoted file names. If a file name was added to the git repository contained special characters, such as `\n`, then the `git ls-files` command would print the file name in quotes and escape any special characters. If the `Git#ls_files` method encountered a quoted file name it would use `eval()` to unquote and unescape any special characters, leading to potential remote code execution. Version 1.13.0 of the git gem was released which correctly parses any quoted file names.
GitHub Security Advisory: GHSA-vf99-xw26-86g5
Package: pghero (RUBYGEMS)
Severity: HIGH (CVSS 7.5)
CWE: CWE-209: Generation of Error Message Containing Sensitive Information
Vulnerable versions: < 3.1.0
Patched in: 3.1.0

Summary: PgHero Allows Information Disclosure Through EXPLAIN Feature

Details:
PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. (Depending on database user privileges, this may only be information from the database, or may be information from file contents on the database server.)