Skip to content

Commit 70fdfca

Browse files
pixeltrixpostmodern
authored andcommitted
Relax version constraints to allow Rails 7.1.6 update
The ~> operator on the revision triggers a false positive on the latest patch update in the Rails 7.1.x release series.
1 parent 3bc3575 commit 70fdfca

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

gems/actionpack/CVE-2024-54133.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ unaffected_versions:
3535
- "< 5.2.0"
3636
patched_versions:
3737
- "~> 7.0.8.7"
38-
- "~> 7.1.5.1"
38+
- "~> 7.1.5, >= 7.1.5.1"
3939
- "~> 7.2.2, >= 7.2.2.1"
4040
- ">= 8.0.0.1"
4141
related:

gems/activerecord/CVE-2025-55193.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ description: |
2424
Thanks to [lio346](https://hackerone.com/lio346) for reporting
2525
this vulnerability.
2626
patched_versions:
27-
- "~> 7.1.5.2"
27+
- "~> 7.1.5, >= 7.1.5.2"
2828
- "~> 7.2.2, >= 7.2.2.2"
2929
- ">= 8.0.2.1"
3030
related:

gems/activestorage/CVE-2025-24293.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ description: |
5858
unaffected_versions:
5959
- "< 5.20"
6060
patched_versions:
61-
- "~> 7.1.5.2"
61+
- "~> 7.1.5, >= 7.1.5.2"
6262
- "~> 7.2.2, >= 7.2.2.2"
6363
- ">= 8.0.2.1"
6464
related:

0 commit comments

Comments
 (0)