Skip to content

One new foreman_azure_rm gem advisory - #1302

Open
jasnow wants to merge 2 commits into
rubysec:masterfrom
jasnow:nov-8a-advs
Open

jasnow wants to merge 2 commits into
rubysec:masterfrom
jasnow:nov-8a-advs

Conversation

@jasnow

@jasnow jasnow commented Nov 8, 2026

Copy link
Copy Markdown
Member

One new foreman_azure_rm gem advisory

Also removed it from the ignore file.

ghsa: gphm-f2cq-m9pv
url: https://nvd.nist.gov/vuln/detail/CVE-2021-3413
title: Credential leak in tfm-rubygem-foreman_azure_rm
date: 2021-03-24

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, tricky one, there are various dates in various places (NVD, GHSA). Which one to pick?

- https://nvd.nist.gov/vuln/detail/CVE-2021-3413
- https://rubygems.org/gems/foreman_azure_rm/versions/2.2.0
- https://github.com/theforeman/foreman_azure_rm/compare/v2.1.3...v2.2.0
- https://github.com/theforeman/foreman_azure_rm/pull/103 (3/1/21)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the appended info makes it invalid URL 🤔

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants