Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

wth - Security vulnerability in paperclip gem #1229

Merged
merged 1 commit into from
Feb 5, 2018
Merged

wth - Security vulnerability in paperclip gem #1229

merged 1 commit into from
Feb 5, 2018

Commits on Jan 26, 2018

  1. wth - Security vulnerability in paperclip gem 

    Just received this message from GitHub (SPARCRequest and SPARCFulfillment):
We found a potential security vulnerability in one of your dependencies.
The paperclip dependency defined in Gemfile.lock has a known high severity security vulnerability in version range >= 3.1.4, <= 5.1.0 and should be updated.

CVE-2017-0889 (https://nvd.nist.gov/vuln/detail/CVE-2017-0889)
Someone has already opened an issue in thoughtbot/paperclip repo: thoughtbot/paperclip#2530

[#154561567]

Story - https://www.pivotaltracker.com/story/show/154561567
    @wtholt
    wtholt committed Jan 26, 2018
    Configuration menu
    Copy the full SHA
    ce9bcf0 View commit details
    Browse the repository at this point in the history