2 matches found
Malicious code in binary-search_frequency (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
CVE-2022-31072 Octokit gem published with world-writable files
Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to -rw-rw-rw- i.e. 0666 instead of rw-r--r-- i.e. 0644. This means everyone who is...