FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-19 19:12:13 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
ca05d9da-ac1d-4113-8a05-ffe9cd0d6160sinatra -- XSS vulnerability

Sinatra blog:

Sinatra had a critical vulnerability since v2.0.0. The purpose of this release is to fix CVE-2018-11627.

The vulnerability is that XSS can be executed by using illegal parameters.


Discovery 2018-06-09
Entry 2018-07-31
rubygem-sinatra
>= 2.0.0 lt 2.0.2

http://sinatrarb.com/2018/06/09/sinatra-2.0.2-and-2.0.3.html
https://github.com/sinatra/sinatra/blob/master/CHANGELOG.md
CVE-2018-11627