bundler-audit 0.7.0.1 → 0.9.0.1

data/data/ruby-advisory-db/gems/paranoid2/CVE-2019-13589.yml

@@ -1,16 +0,0 @@
----
-gem: paranoid2
-cve: 2019-13589
-ghsa: 4g4c-8gqh-m4vm
-url: https://github.com/rubygems/rubygems.org/issues/2051
-date: 2019-07-16
-title: Code backdoor in paranoid2
-description: |
-  The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included
-  a code-execution backdoor inserted by a third party.
-
-  The current version, without this backdoor, is 1.1.5.
-cvss_v3: 9.8
-unaffected_versions:
-  - "> 1.1.6"
-  - "< 1.1.6"

data/data/ruby-advisory-db/gems/paratrooper-newrelic/CVE-2014-1234.yml

@@ -1,13 +0,0 @@
----
-gem: paratrooper-newrelic
-cve: 2014-1234
-osvdb: 101839
-url: https://nvd.nist.gov/vuln/detail/CVE-2014-1234
-title: Paratrooper-newrelic Gem for Ruby Process Listing API Key Local Disclosure
-date: 2014-01-08
-description: |
-  Paratrooper-newrelic Gem for Ruby contains a flaw in
-  /lib/paratrooper-newrelic.rb. The issue is triggered when the script exposes
-  the API key, allowing a local attacker to gain access to it by monitoring the
-  process tree.
-cvss_v2: 2.1

data/data/ruby-advisory-db/gems/paratrooper-pingdom/CVE-2014-1233.yml

@@ -1,13 +0,0 @@
----
-gem: paratrooper-pingdom
-cve: 2014-1233
-osvdb: 101847
-url: https://nvd.nist.gov/vuln/detail/CVE-2014-1233
-title: paratrooper-pingdom Gem for Ruby /lib/paratrooper-pingdom.rb API Login Credentials Local Disclosure
-date: 2013-12-26
-description: |
-  paratrooper-pingdom Gem for Ruby contains a flaw in
-  /lib/paratrooper-pingdom.rb. The issue is triggered when the script exposes
-  API login credentials, allowing a local attacker to gain access to the API
-  key, username, and password for the API login by monitoring the process tree.
-cvss_v2: 2.1

data/data/ruby-advisory-db/gems/passenger/CVE-2013-2119.yml

@@ -1,15 +0,0 @@
----
-gem: passenger
-cve: 2013-2119
-osvdb: 93752
-url: https://nvd.nist.gov/vuln/detail/CVE-2013-2119
-title: Phusion Passenger Gem for Ruby Predictable Temporary Filename Generation Symlink Local Privilege Escalation
-date: 2013-05-29
-description: Phusion Passenger Gem for Ruby contains a flaw as the program creates
-  temporary files insecurely. It is possible for a local attacker to use a symlink
-  attack against the Nginx config file to cause the program to unexpectedly overwrite
-  the file, allowing a local attacker to execute code with elevated privileges.
-cvss_v2: 4.6
-patched_versions:
-  - "~> 3.0.21"
-  - ">= 4.0.5"

data/data/ruby-advisory-db/gems/passenger/CVE-2013-4136.yml

@@ -1,14 +0,0 @@
----
-gem: passenger
-cve: 2013-4136
-osvdb: 94074
-url: https://nvd.nist.gov/vuln/detail/CVE-2013-4136
-title: Phusion Passenger Gem for Ruby Utils.cpp Temporary Directory Creation Symlink Local Privilege Escalation
-date: 2013-06-10
-description: Phusion Passenger Gem for Ruby contains a flaw as the program creates
-  temporary directories insecurely. It is possible for a local attacker to use a
-  symlink attack against the Utils.cpp file to allow the attacker to gain elevated
-  privileges.
-cvss_v2: 4.6
-patched_versions:
-  - ">= 4.0.8"

data/data/ruby-advisory-db/gems/passenger/CVE-2014-1831.yml

@@ -1,13 +0,0 @@
----
-gem: passenger
-cve: 2014-1831
-osvdb: 102613
-url: https://nvd.nist.gov/vuln/detail/CVE-2014-1831
-title: Phusion Passenger Server Instance Directory Creation Local Symlink File Overwrite
-date: 2014-01-28
-description: Phusion Passenger contains a flaw as the program creates the server instance
-  directory insecurely. It is possible for a local attacker to use a symlink attack against
-  the directory to cause the program to unexpectedly overwrite an arbitrary file.
-cvss_v2: 2.1
-patched_versions:
-  - ">= 4.0.37"

data/data/ruby-advisory-db/gems/passenger/CVE-2014-1832.yml

@@ -1,13 +0,0 @@
----
-gem: passenger
-cve: 2014-1832
-osvdb: 102613
-url: https://nvd.nist.gov/vuln/detail/CVE-2014-1832
-title: Phusion Passenger Server Instance Directory Creation Local Symlink File Overwrite
-date: 2014-01-29
-description: Phusion Passenger contains a flaw as the program creates the server instance
-  directory insecurely. It is possible for a local attacker to use a symlink attack against
-  the directory to cause the program to unexpectedly overwrite an arbitrary file.
-cvss_v2: 2.1
-patched_versions:
-  - ">= 4.0.38"

data/data/ruby-advisory-db/gems/passenger/CVE-2015-7519.yml

@@ -1,17 +0,0 @@
----
-gem: passenger
-cve: 2015-7519
-url: https://blog.phusion.nl/2015/12/07/cve-2015-7519/
-title: Phusion Passenger Server allows to overwrite headers in some cases
-date: 2015-11-23
-description: It is possible in some cases, for clients to overwrite headers
-  set by the server, resulting in a medium level security issue.
-  Passenger 5 uses an SCGI-inspired format to pass headers to Ruby/Python
-  applications, while Passenger 4 uses an SCGI-inspired format to pass
-  headers to all applications. This implies a conversion to
-  UPPER_CASE_WITH_UNDERSCORES whereby the difference between characters
-  like '-' and '_' is lost.
-
-patched_versions:
-  - "~> 4.0.60"
-  - ">= 5.0.22"

data/data/ruby-advisory-db/gems/passenger/CVE-2016-10345.yml

@@ -1,17 +0,0 @@
----
-gem: passenger
-cve: 2016-10345
-url: https://blog.phusion.nl/2017/01/10/passenger-5-1-1/
-title:  Predictable tmp File Path Vulnerability in Phusion Passenger
-date: 2016-11-09
-
-description: >-
-  In Phusion Passenger before 5.1.0, a known /tmp filename was used during
-  passenger-install-nginx-module execution, which could allow local attackers
-  to gain the privileges of the passenger user.
-
-cvss_v2: 4.6
-cvss_v3: 7.8
-
-patched_versions:
-  - ">= 5.1.0"

data/data/ruby-advisory-db/gems/passenger/OSVDB-90738.yml

@@ -1,16 +0,0 @@
----
-gem: passenger
-cve: 2012-6135
-osvdb: 90738
-url: http://old.blog.phusion.nl/2013/03/05/phusion-passenger-4-0-beta-1-and-2-arbitrary-file-deletion-vulnerability/
-title: Phusion Passenger Gem for Ruby Arbitrary File Deletion
-date: 2012-02-01
-description: Phusion Passenger Gem for Ruby contains a flaw that is triggered
-  during application startup. This issue may allow a local attacker to delete
-  arbitrary files via an application process. If the program has completed the
-  start up process this vulnerability is no longer exploitable.
-cvss_v2: 2.1
-patched_versions:
-  - ">= 4.0.0"
-unaffected_versions:
-  - "< 4.0.0"

data/data/ruby-advisory-db/gems/pdfkit/CVE-2013-1607.yml

@@ -1,11 +0,0 @@
---- 
-gem: pdfkit
-cve: 2013-1607
-osvdb: 90867
-url: https://nvd.nist.gov/vuln/detail/CVE-2013-1607
-title: PDFKit Gem for Ruby PDF File Generation Parameter Handling Remote Code Execution
-date: 2013-02-21
-description: PDFKit Gem for Ruby contains a flaw that is due to the program failing to properly validate input during the handling of parameters when generating PDF files. This may allow a remote attacker to potentially execute arbitrary code via the pdfkit generation options.
-cvss_v2: 
-patched_versions: 
-  - ">= 0.5.3"

data/data/ruby-advisory-db/gems/point-cli/CVE-2014-4997.yml

@@ -1,8 +0,0 @@
----
-gem: point-cli
-cve: 2014-4997
-osvdb: 108577
-url: https://nvd.nist.gov/vuln/detail/CVE-2014-4997
-title: point-cli Gem for Ruby /lib/commands/setup.rb Process Table Local Plaintext Credential Disclosure
-date: 2014-06-30
-description: point-cli Gem for Ruby contains a flaw in /lib/commands/setup.rb that is due to the application exposing credential information in plaintext in the process table. This may allow a local attacker to gain access to credential information.

data/data/ruby-advisory-db/gems/private_address_check/CVE-2017-0904.yml

@@ -1,17 +0,0 @@
----
-gem: private_address_check
-cve: 2017-0904
-url: https://github.com/jtdowney/private_address_check/issues/1
-title: private_address_check Ruby Gem Resolv.getaddresses Server-Side Request Forgery
-date: 2017-11-07
-description: |
-  The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's
-  Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security
-  measures, such as when used to blacklist private network addresses to prevent server-side
-  request forgery.
-
-cvss_v2: 6.8
-cvss_v3: 8.1
-
-patched_versions:
-  - ">= 0.4.0"

data/data/ruby-advisory-db/gems/private_address_check/CVE-2017-0909.yml

@@ -1,15 +0,0 @@
----
-gem: private_address_check
-cve: 2017-0909
-url: https://github.com/jtdowney/private_address_check/pull/3
-title: private_address_check Ruby Gem Blacklist Bypass privilege escalation
-date: 2017-11-09
-description: |
-  The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete
-  blacklist of common private/local network addresses used to prevent server-side request forgery.
-
-cvss_v2: 7.5
-cvss_v3: 9.8
-
-patched_versions:
-  - ">= 0.4.1"

data/data/ruby-advisory-db/gems/private_address_check/CVE-2018-3759.yml

@@ -1,14 +0,0 @@
----
-gem: private_address_check
-cve: 2018-3759
-url: https://github.com/jtdowney/private_address_check/commit/4068228187db87fea7577f7020099399772bb147
-title: private_address_check Ruby Gem Time-of-check Time-of-use race condition
-date: 2018-05-03
-description: |
-  private_address_check ruby gem before 0.5.0 is vulnerable to a time-of-check time-of-use (TOCTOU)
-  race condition due to the address the socket uses not being checked. DNS entries with a TTL of 0
-  can trigger this case where the initial resolution is a public address by the subsequent
-  resolution is a private address.
-
-patched_versions:
-  - ">= 0.5.0"

data/data/ruby-advisory-db/gems/puma/CVE-2019-16770.yml

@@ -1,21 +0,0 @@
----
-gem: puma
-cve: 2019-16770
-ghsa: 7xx3-m584-x994
-url: https://github.com/puma/puma/security/advisories/GHSA-7xx3-m584-x994
-date: 2019-12-05
-title: Keepalive thread overload/DoS in puma
-description: |
-  A poorly-behaved client could use keepalive requests to monopolize
-  Puma's reactor and create a denial of service attack.
-
-  If more keepalive connections to Puma are opened than there are
-  threads available, additional connections will wait permanently if
-  the attacker sends requests frequently enough.
-
-cvss_v3: 8.8
-cvss_v2: 6.8
-
-patched_versions:
-  - "~> 3.12.2"
-  - ">= 4.3.1"

data/data/ruby-advisory-db/gems/puma/CVE-2020-11076.yml

@@ -1,22 +0,0 @@
----
-gem: puma
-cve: 2020-11076
-ghsa: x7jg-6pwg-fx5h
-url: https://github.com/puma/puma/security/advisories/GHSA-x7jg-6pwg-fx5h
-date: 2020-05-22
-title: HTTP Smuggling via Transfer-Encoding Header in Puma
-description: |-
-  ### Impact
-
-  By using an invalid transfer-encoding header, an attacker could
-  [smuggle an HTTP response.](https://portswigger.net/web-security/request-smuggling)
-
-  ### Patches
-
-  The problem has been fixed in Puma 3.12.5 and Puma 4.3.4.
-
-cvss_v3: 7.5
-
-patched_versions:
-  - "~> 3.12.5"
-  - ">= 4.3.4"

data/data/ruby-advisory-db/gems/puma/CVE-2020-11077.yml

@@ -1,31 +0,0 @@
----
-gem: puma
-cve: 2020-11077
-ghsa: w64w-qqph-5gxm
-url: https://github.com/puma/puma/security/advisories/GHSA-w64w-qqph-5gxm
-date: 2020-05-22
-title: HTTP Smuggling via Transfer-Encoding Header in Puma
-description: |-
-  ### Impact
-
-  This is a similar but different vulnerability to the one patched in 3.12.5 and 4.3.4.
-
-  A client could smuggle a request through a proxy, causing the proxy to send a response
-  back to another unknown client.
-
-  If the proxy uses persistent connections and the client adds another request in via HTTP
-  pipelining, the proxy may mistake it as the first request's body. Puma, however,
-  would see it as two requests, and when processing the second request, send back
-  a response that the proxy does not expect. If the proxy has reused the persistent
-  connection to Puma to send another request for a different client, the second response
-  from the first client will be sent to the second client.
-
-  ### Patches
-
-  The problem has been fixed in Puma 3.12.6 and Puma 4.3.5.
-
-cvss_v3: 6.8
-
-patched_versions:
-- "~> 3.12.6"
-- ">= 4.3.5"

data/data/ruby-advisory-db/gems/puma/CVE-2020-5247.yml

@@ -1,25 +0,0 @@
----
-gem: puma
-cve: 2020-5247
-ghsa: 84j7-475p-hp8v
-url: https://github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v
-date: 2020-02-27
-title: HTTP Response Splitting vulnerability in puma
-description: |-
-  If an application using Puma allows untrusted input in a response header,
-  an attacker can use newline characters (i.e. CR, LF) to end the header and
-  inject malicious content, such as additional headers or an entirely new
-  response body. This vulnerability is known as HTTP Response Splitting.
-
-  While not an attack in itself, response splitting is a vector for several
-  other attacks, such as cross-site scripting (XSS).
-
-cvss_v3: 6.5
-
-patched_versions:
-  - "~> 3.12.4"
-  - ">= 4.3.3"
-
-related:
-  cve:
-    - 2019-16254

data/data/ruby-advisory-db/gems/puma/CVE-2020-5249.yml

@@ -1,36 +0,0 @@
----
-gem: puma
-cve: 2020-5249
-ghsa: 33vf-4xgg-9r58
-url: https://github.com/puma/puma/security/advisories/GHSA-33vf-4xgg-9r58
-date: 2020-03-03
-title: HTTP Response Splitting (Early Hints) in Puma
-description: |-
-  ### Impact
-  If an application using Puma allows untrusted input in an early-hints header,
-  an attacker can use a carriage return character to end the header and inject
-  malicious content, such as additional headers or an entirely new response body.
-  This vulnerability is known as [HTTP Response
-  Splitting](https://owasp.org/www-community/attacks/HTTP_Response_Splitting)
-
-  While not an attack in itself, response splitting is a vector for several other
-  attacks, such as cross-site scripting (XSS).
-
-  This is related to [CVE-2020-5247](https://github.com/puma/puma/security/advisories/GHSA-84j7-475p-hp8v),
-  which fixed this vulnerability but only for regular responses.
-
-  ### Patches
-  This has been fixed in 4.3.3 and 3.12.4.
-
-  ### Workarounds
-  Users can not allow untrusted/user input in the Early Hints response header.
-
-cvss_v3: 6.5
-
-patched_versions:
-  - "~> 3.12.4"
-  - ">= 4.3.3"
-
-related:
-  cve:
-    - 2020-5247

data/data/ruby-advisory-db/gems/quick_magick/OSVDB-106954.yml

@@ -1,7 +0,0 @@
----
-gem: quick_magick
-osvdb: 106954
-url: http://osvdb.org/show/osvdb/106954
-title: quick_magick Gem for Ruby QuickMagick::Image.read Function Crafted String Handling Remote Command Injection 
-date: 2011-01-12
-description: quick_magick Gem for Ruby contains a flaw in the QuickMagick::Image.read function. The issue is triggered when handling a specially crafted string. This may allow a remote attacker to inject arbitrary commands.

data/data/ruby-advisory-db/gems/rack/CVE-2011-5036.yml

@@ -1,21 +0,0 @@
----
-gem: rack
-cve: 2011-5036
-osvdb: 78121
-url: https://nvd.nist.gov/vuln/detail/CVE-2011-5036
-title: |
-  Rack Hash Collision Form Parameter Parsing Remote DoS
-date: 2011-12-28
-
-description: |
-  Rack contains a flaw that may allow a remote denial of service. The issue is
-  triggered when an attacker sends multiple crafted parameters which trigger
-  hash collisions, and will result in loss of availability for the program via
-  CPU consumption.
-
-cvss_v2: 5.0
-patched_versions:
-  - "~> 1.1.3"
-  - "~> 1.2.5"
-  - "~> 1.3.6"
-  - ">= 1.4.0"

data/data/ruby-advisory-db/gems/rack/CVE-2012-6109.yml

@@ -1,21 +0,0 @@
----
-gem: rack
-cve: 2012-6109
-osvdb: 89317
-url: https://nvd.nist.gov/vuln/detail/CVE-2012-6109
-title: |
-  Rack Regular Expressions Engine Content-Disposition Header Parsing Infinite Loop Remote DoS
-date: 2012-05-04
-
-description: |
-  Rack contains a flaw in the Regular Expressions Engine that may allow a remote
-  denial of service. The issue is triggered when parsing context-disposition
-  headers. With a specially crafted header, a remote attacker can cause an
-  infinite loop, which will result in a loss of availability for the webserver.
-
-cvss_v2: 4.3
-patched_versions:
-  - "~> 1.1.4"
-  - "~> 1.2.6"
-  - "~> 1.3.7"
-  - ">= 1.4.2"

data/data/ruby-advisory-db/gems/rack/CVE-2013-0183.yml

@@ -1,19 +0,0 @@
----
-gem: rack
-cve: 2013-0183
-osvdb: 89320
-url: https://nvd.nist.gov/vuln/detail/CVE-2013-0183
-title: |
-  Rack Long String Parsing Memory Consumption Remote DoS
-date: 2013-01-07
-
-description: |
-  Rack contains a flaw that may allow a remote denial of service. The issue is
-  triggered when parsing an overly long string. With a specially crafted string,
-  a remote attacker can cause a consumption of memory. This will result in a
-  loss of availability for the webserver.
-
-cvss_v2: 5.0
-patched_versions:
-  - "~> 1.3.8"
-  - ">= 1.4.3"

data/data/ruby-advisory-db/gems/rack/CVE-2013-0184.yml

@@ -1,20 +0,0 @@
----
-gem: rack
-cve: 2013-0184
-osvdb: 89327
-url: https://nvd.nist.gov/vuln/detail/CVE-2013-0184
-title: |
-  Rack Rack::Auth::AbstractRequest Class Unspecified Remote DoS
-date: 2013-01-13
-
-description: |
-  Rack contains a flaw in the Rack::Auth::AbstractRequest class that may allow
-  a remote denial of service. The issue is triggered when an unspecified error
-  occurs, which will result in a loss of availability for the webserver.
-
-cvss_v2: 4.3
-patched_versions:
-  - "~> 1.1.5"
-  - "~> 1.2.7"
-  - "~> 1.3.9"
-  - ">= 1.4.4"

data/data/ruby-advisory-db/gems/rack/CVE-2013-0262.yml

@@ -1,18 +0,0 @@
----
-gem: rack
-cve: 2013-0262
-osvdb: 89938
-url: https://nvd.nist.gov/vuln/detail/CVE-2013-0262
-title: |
-  Rack Rack::File Function Symlink Traversal Arbitrary File Disclosure
-date: 2013-02-07
-
-description: |
-  Rack contains a flaw as the Rack::File function creates temporary files
-  insecurely. It is possible for a local attacker to use a symlink attack to
-  traverse to an arbitrary file and disclose its contents
-
-cvss_v2: 4.3
-patched_versions:
-- "~> 1.4.5"
-- ">= 1.5.2"

data/data/ruby-advisory-db/gems/rack/CVE-2013-0263.yml

@@ -1,23 +0,0 @@
----
-gem: rack
-cve: 2013-0263
-osvdb: 89939
-url: https://nvd.nist.gov/vuln/detail/CVE-2013-0263
-title: |
-  Rack Rack::Session::Cookie Function Timing Attack Remote Code Execution
-date: 2013-02-07
-
-description: |
-  Rack contains a flaw that is due to an error in the Rack::Session::Cookie
-  function. Users of the Marshal session cookie encoding (the default), are
-  subject to a timing attack that may lead an attacker to execute arbitrary
-  code. This attack is more practical against 'cloud' users as intra-cloud
-  latencies are sufficiently low to make the attack viable.
-
-cvss_v2: 5.1
-patched_versions:
-  - ~> 1.1.6
-  - ~> 1.2.8
-  - ~> 1.3.10
-  - ~> 1.4.5
-  - ">= 1.5.2"

data/data/ruby-advisory-db/gems/rack/CVE-2015-3225.yml

@@ -1,18 +0,0 @@
----
-gem: rack
-cve: 2015-3225
-url: https://groups.google.com/forum/#!topic/ruby-security-ann/gcUbICUmKMc
-title: |
-  Potential Denial of Service Vulnerability in Rack
-date: 2015-06-16
-
-description: |
-  Carefully crafted requests can cause a `SystemStackError` and potentially 
-  cause a denial of service attack. 
-
-  All users running an affected release should upgrade. 
-
-patched_versions:
-  - ">= 1.6.2"
-  - "~> 1.5.4"
-  - "~> 1.4.6"

data/data/ruby-advisory-db/gems/rack/CVE-2018-16470.yml

@@ -1,56 +0,0 @@
----
-gem: rack
-cve: 2018-16470
-url: https://groups.google.com/forum/#!topic/ruby-security-ann/Dz4sRl-ktKk
-title: Possible DoS vulnerability in Rack
-date: 2018-11-05
-
-description: |
-  There is a possible DoS vulnerability in the multipart parser in Rack. This
-  vulnerability has been assigned the CVE identifier CVE-2018-16470.
-
-  Versions Affected:  2.0.4, 2.0.5
-  Not affected:       <= 2.0.3
-  Fixed Versions:     2.0.6
-
-  Impact
-  ------
-  There is a possible DoS vulnerability in the multipart parser in Rack.
-  Carefully crafted requests can cause the multipart parser to enter a
-  pathological state, causing the parser to use CPU resources disproportionate to
-  the request size.
-
-  Impacted code can look something like this:
-
-  ```
-  Rack::Request.new(env).params
-  ```
-
-  But any code that uses the multi-part parser may be vulnerable.
-
-  Rack users that have manually adjusted the buffer size in the multipart parser
-  may be vulnerable as well.
-
-  All users running an affected release should either upgrade or use one of the
-  workarounds immediately.
-
-  Releases
-  --------
-  The 2.0.6 release is available at the normal locations.
-
-  Workarounds
-  -----------
-  To work around this issue, the following code can be used:
-
-  ```
-  require "rack/multipart/parser"
-
-  Rack::Multipart::Parser.send :remove_const, :BUFSIZE
-  Rack::Multipart::Parser.const_set :BUFSIZE, 16384
-  ```
-
-unaffected_versions:
-  - "<= 2.0.3"
-
-patched_versions:
-  - ">= 2.0.6"