Skip to content

Commit d3a78ee

Browse files
authored
Merge pull request #1158 from krzyzak/update-pay-patched-version
update patched_versions for GHSA-mjgf-xj26-9qf9
2 parents 95cb96b + 560208e commit d3a78ee

1 file changed

Lines changed: 5 additions & 4 deletions

File tree

gems/pay/GHSA-mjgf-xj26-9qf9.yml

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -38,15 +38,16 @@ description: |
3838
3939
- Credit - Reported by tonghuaroot (https://github.com/tonghuaroot)
4040
cvss_v3: 7.4
41+
patched_versions:
42+
- ">= 11.6.2"
4143
related:
4244
url:
4345
- https://advisories.gitlab.com/gem/pay/GHSA-mjgf-xj26-9qf9
4446
- https://github.com/pay-rails/pay/security/advisories/GHSA-mjgf-xj26-9qf9
4547
- https://github.com/advisories/GHSA-mjgf-xj26-9qf9
4648
notes: |
47-
- Latest (unpatched) release as of 7/2/2026 is 11.6.1
48-
- `pay` (rubygem) ≤ v11.6.1 (latest release as of 2026-05-27).
49-
- https://github.com/pay-rails/pay/releases/tag/v11.6.1
50-
- https://rubygems.org/gems/pay/versions/11.6.1
49+
- Fixed in 11.6.2.
50+
- https://github.com/pay-rails/pay/releases/tag/v11.6.2
51+
- https://rubygems.org/gems/pay/versions/11.6.2
5152
- cvss_v3 value comes from project advisory.
5253
- No cve value, so missing cvss_v2 and cvss_v4 values.

0 commit comments

Comments
 (0)