brakeman-lib 5.3.0 → 5.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: df75ab4f9b0d2b0ed8db5548e0f18e8fc7028b9ed19e3b05e583e62070aac6d3
-  data.tar.gz: 1af6b8a2ecd4286a7808b357779cfbd720bb263a371ca86fd9555bf806e97d01
+  metadata.gz: d1cfbfc4a477ca4da5ff22010526e792bc218fa2aa7abe454a8a9d0be4dd2128
+  data.tar.gz: 5209d14eb749f8ec05ffd724e53a0cf575834c8f21fda1ef6c0481be4165133b
 SHA512:
-  metadata.gz: 32b3f95690c33c05aced581c94c60544c8b4d02ec85e001d2a67f54eedaad15f9bd52157d526d6ab3cc9d30f33fc07c155e6030cd6d75f8cac5b5ff82739daa1
-  data.tar.gz: 55ff958c1101ac534921807d105253c65b3ef62500b1354dacd42d922ac6f8ce446db1213398f95d80d87f8af47a4c430e3d38f13592aeaeadfa156b9f347a82
+  metadata.gz: 5e3deacdca32c220ca081e3ceff9f98f4a4152150b97e9fa2915c40569fc9a01b5f9a2b451593090e2ea20874ba741168ca2c1913a0fe77e59b215f58f2ea80e
+  data.tar.gz: 8acf5cef0175a70381c5dfa6d015e9882a23786317b13cf16b6432376614dffb3bb30ead9fd12bb45f267f92a786012dd28d86728fc17e9ae7a4ef467951def9

data/CHANGES.md

@@ -1,3 +1,7 @@
+# 5.3.1 - 2022-08-09
+
+* Fix version range for CVE-2022-32209
+
 # 5.3.0 - 2022-08-09
 
 * Include explicit engine or lib paths in vendor/ (Joe Rafaniello)

data/lib/brakeman/checks/check_sanitize_config_cve.rb

@@ -9,7 +9,7 @@ class Brakeman::CheckSanitizeConfigCve < Brakeman::BaseCheck
     @specific_warning = false
 
     @gem_version = tracker.config.gem_version :'rails-html-sanitizer'
-    if version_between? "0.0.0", "1.4.3", @gem_version
+    if version_between? "0.0.0", "1.4.2", @gem_version
       check_config
       check_sanitize_calls
       check_safe_list_allowed_tags

data/lib/brakeman/version.rb

@@ -1,3 +1,3 @@
 module Brakeman
-  Version = "5.3.0"
+  Version = "5.3.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: brakeman-lib
 version: !ruby/object:Gem::Version
-  version: 5.3.0
+  version: 5.3.1
 platform: ruby
 authors:
 - Justin Collins