~ / search / GHSA-h3r8-h5qw-4r35

GHSA-h3r8-h5qw-4r35

sidekiq vulnerable to cross-site scripting

Source: GitHub Advisory Database (reviewed) High CVE-2023-1892

Packages

EcosystemPackageAffectedFixed in
RubyGems sidekiq >= 7.0.4, < 7.0.8 7.0.8

Details

As written in the advisory (Markdown source, shown as plain text).

sidekiq from 7.0.4 to 7.0.7 is vulnerable to reflected cross-site scripting. A fix was released in version 7.0.8.

References

External links from the advisory. They lead to third-party sites.