Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

sprockets

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
RubyGems

Advisories 2

  • There is an information leak vulnerability in Sprockets.

    Affected: from 3.0.0, fixed in 3.7.2; from 4.0.0.beta1, fixed in 4.0.0.beta8; fixed in 2.12.5.

  • Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before…

    Affected: fixed in 2.0.5; from 2.1.0, fixed in 2.1.4; from 2.2.0, fixed in 2.2.3; from 2.3.0, fixed in 2.3.3; from 2.4.0, fixed in 2.4.6; from 2.5.0, fixed in 2.5.1; from 2.6.0, fixed in 2.7.1; from 2.8.0, fixed in 2.8.3; from 2.9.0, fixed in 2.9.4; from 2.10.0, fixed in 2.10.2; from 2.11.0, fixed in 2.11.3; from 2.12.0, fixed in 2.12.3.