wclaytor / bpc-rails-demo

A Ruby on Rails demo
http://demo.billclaytor.com
MIT License
0 stars 0 forks source link

[Bug Report] - Github Actions - Lint security check fails #37

Open wclaytor opened 1 year ago

wclaytor commented 1 year ago

Describe the bug A clear and concise description of what the bug is.

To Reproduce Steps to reproduce the behavior:

  1. Submit a pull request
  2. View the failed lint test

Expected behavior All tests pass

Actual behavior

Run bundle exec bundler-audit
  bundle exec bundler-audit
  bundle exec brakeman -q -w2
  shell: /usr/bin/bash -e {0}
Download ruby-advisory-db ...
Cloning into '/home/runner/.local/share/ruby-advisory-db'...
ruby-advisory-db:
  advisories:   676 advisories
  last updated: 2023-03-07 11:12:12 -0800
  commit:   b2adb3c9478ddf4bb9732cd1003ceabcfdcedb90
Name: rack
Version: 2.2.6.2
CVE: CVE-2023-27530
Criticality: Unknown
URL: https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388
Title: Possible DoS Vulnerability in Multipart MIME parsing
Solution: upgrade to '~> 2.0.9, >= 2.0.9.3', '~> 2.1.4, >= 2.1.4.3', '~> 2.2.6, >= 2.2.6.3', '>= 3.0.4.2'

Vulnerabilities found!
Error: Process completed with exit code 1.

Screenshots If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

Smartphone (please complete the following information):

Additional context Add any other context about the problem here.