New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Use JSON.parse instead of JSON.load #55

Merged

mullermp merged 1 commit into main from json-parse

Mar 7, 2022

+18 −17

Contributor

mullermp commented Mar 7, 2022

Use JSON parse


          Use JSON.parse instead of JSON.load

f517de4

alextwoods approved these changes

View reviewed changes

mullermp merged commit e884128 into main

mullermp deleted the json-parse branch

March 7, 2022 17:58

kule added a commit to KCSCorg/kcsc_api that referenced this pull request


          Security: Upgrade jmespath & rails-html-sanitizer

56497a6

Name: jmespath
Version: 1.4.0
CVE: CVE-2022-32511
GHSA: GHSA-5c5f-7vfq-3732
Criticality: Unknown
URL: jmespath/jmespath.rb#55
Title: JMESPath for Ruby using JSON.load instead of JSON.parse
Solution: upgrade to >= 1.6.1

Name: rails-html-sanitizer
Version: 1.4.2
CVE: CVE-2022-32209
Criticality: Unknown
URL: https://groups.google.com/g/rubyonrails-security/c/ce9PhUANQ6s
Title: Possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer
Solution: upgrade to >= 1.4.3

# for free to join this conversation on GitHub. Already have an account? # to comment

Labels

None yet