GHSA-w78q-4w34-jrjx
Publify vulnerable to code injection
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| RubyGems | publify_core | < 9.2.8 | 9.2.8 |
Details
As written in the advisory (Markdown source, shown as plain text).
Code Injection in GitHub repository publify/publify prior to 9.2.8.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2022-0578
- https://github.com/publify/publify/commit/b50df050c593cc532b2c516792989bcfce2d73f7
- https://github.com/publify/publify
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/publify_core/CVE-2022-0578.yml
- https://huntr.dev/bounties/02c81928-eb47-476f-8000-e93dc796dbcc