Skip to content

Commit 0cd4566

Browse files
committed
Fix false positives with CVE-2026-33658 (#1020).
* activestorage 8.0.5 and 8.1.3 are considered patched. https://rubyonrails.org/2026/3/24/Rails-Versions-8-0-5-and-8-1-3-have-been-released
1 parent dfabfc1 commit 0cd4566

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

gems/activestorage/CVE-2026-33658.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,8 +15,8 @@ description: |
1515
ranges causes disproportionate CPU usage compared to a normal
1616
request for the same file, possibly resulting in a DoS vulnerability.
1717
patched_versions:
18-
- "~> 7.2.3.1"
19-
- "~> 8.0.4.1"
18+
- "~> 7.2.3, >= 7.2.3.1"
19+
- "~> 8.0.4, >= 8.0.4.1"
2020
- ">= 8.1.2.1"
2121
related:
2222
url:

0 commit comments

Comments
 (0)