Security Advisories

CGA-rwv5-454x-4xjp

Published

Last updated

https://images.chainguard.dev/security/CGA-rwv5-454x-4xjp

Package

ruby-3.0

Latest Update

Not affected

Aliases

Severity

9.8

Critical

CVSS V3

Summary

Buffer overrun in CGI.escape_html

Description

A buffer overrun vulnerability was discovered in CGI.escape_html. This can lead to a buffer overflow when a user passes a very large string (> 700 MB) to CGI.escape_html on a platform where long type takes 4 bytes, typically, Windows.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-rwv5-454x-4xjp

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources