<#134 rdoc throwing critical vulnerabilities> Issu...
# pact-ruby-standalone
g
#134 rdoc throwing critical vulnerabilities Issue created by milda-a Pre issue-raising checklist I have already (please mark the applicable with an
x
): ☑︎ Upgraded to the latest version of the relevant libraries ☑︎ Checked to see if the issue has already been raised Software versions • pact-ruby-standalone: eg 2.4.2 • OS: e.g. ubuntu Expected behaviour No critical vulnerabilities raised when installing pact standalone. Blocks us from publishing new images internally with pact standalone installations. Actual behaviour A critical vulnerability raised for`rdoc v6.5.0` Fixes in versions
6.3.4.1, 6.4.1.1, 6.5.1.1, 6.6.3.1
See fixes in official ruby docs https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281/ Steps to reproduce Installing pact standalone and running it through a security check. pact-foundation/pact-ruby-standalone