Skip to content

[Aikido] Fix security issue in json via minor version upgrade from 2.10.1 to 2.10.2 #450

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Mar 24, 2025

Conversation

aikido-autofix[bot]
Copy link
Contributor

This PR will resolve the following CVEs:

CVE ID Severity Description
CVE-2025-27788
HIGH
JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions prior to 2.10.0 are not vulnerable. Version 2.10.2 fixes the problem. No known workarounds are ava...

@jackton1 jackton1 enabled auto-merge (squash) March 24, 2025 14:01
@jackton1 jackton1 merged commit e4a45c3 into main Mar 24, 2025
5 checks passed
@jackton1 jackton1 deleted the fix/aikido-security-update-packages-3411367-uxjG branch March 24, 2025 14:05
@@ -3,3 +3,5 @@
source 'https://rubygems.org' do
gem 'github_changelog_generator', '1.16.4'
end

gem 'json', '2.10.2'

Check warning

Code scanning / Rubocop (reported by Codacy)

Ensures source code files end with a single newline and appropriate trailing blank lines. Warning

Final newline missing.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant