GitHub
04/16/2024, 12:15 PMx):
☑︎ Upgraded to the latest version of the relevant libraries
☑︎ Checked to see if the issue has already been raised
Software versions
• pact-ruby-standalone: eg 2.4.2
• OS: e.g. ubuntu
Expected behaviour
No critical vulnerabilities raised when installing pact standalone. Blocks us from publishing new images internally with pact standalone installations.
Actual behaviour
A critical vulnerability raised for`rdoc v6.5.0`
Fixes in versions 6.3.4.1, 6.4.1.1, 6.5.1.1, 6.6.3.1
See fixes in official ruby docs https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/
Steps to reproduce
Installing pact standalone and running it through a security check.
pact-foundation/pact-ruby-standaloneGitHub
04/17/2024, 8:48 AM