Skip to content

Add CVE-2022-32209 #506

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 30, 2022
Merged

Add CVE-2022-32209 #506

merged 3 commits into from
Jun 30, 2022

Conversation

sudoremo
Copy link
Contributor

This commit adds CVE-2022-32209 to Gem rails-html-sanitizer. See Google Groups for more information. Thanks for adding 👍

@postmodern postmodern self-requested a review June 29, 2022 02:27
@postmodern
Copy link
Member

postmodern commented Jun 29, 2022

@sudoremo could you make that small change to patched_versions? Otherwise I would have to manually pull in your branch, edit it, and squash merge.

@sudoremo
Copy link
Contributor Author

@postmodern: Sorry I can't seem to open the review. Is the suggested change to change from ~> 1.4.3 to > 1.4.3?

@postmodern
Copy link
Member

@sudoremo '>= 1.4.3' since all versions starting at 1.4.3 are considered patched. Also, single quotes are necessary because YAML interprets > as a special character.

@sudoremo
Copy link
Contributor Author

Done.

@postmodern postmodern merged commit c6969a7 into rubysec:master Jun 30, 2022
@postmodern
Copy link
Member

Squash merged! Thank you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants