“The gem duplicates official `activesupport` (no hyphen) code, but adds a compiled extension. The extension attempts to resolve a base64 encoded domain, downloads a payload, and executes.”
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
https://github.com/rubysec/ruby-advisory-db/blob/master/gems/active-support/CVE-2018-3779.yml
1
GitHub - rubysec/bundler-audit: Patch-level verification for Bundler
