Skip to content

Commit adb94b7

Browse files
committed
Add GHSA-m5f6-4589-m89f for blazer
1 parent 6abafa3 commit adb94b7

1 file changed

Lines changed: 24 additions & 0 deletions

File tree

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
---
2+
gem: blazer
3+
ghsa: m5f6-4589-m89f
4+
url: https://github.com/ankane/blazer/security/advisories/GHSA-m5f6-4589-m89f
5+
title: Stored XSS vulnerability
6+
date: 2026-07-27
7+
description: |
8+
An authenticated user can create a malicious query that executes arbitrary
9+
JavaScript when another user tries to edit the query. This can be used to
10+
perform actions as the other user for resources on the same origin.
11+
patched_versions:
12+
- ">= 3.5.0"
13+
unaffected_versions:
14+
- "< 1.7.3"
15+
cvss_v3: 5.4
16+
related:
17+
url:
18+
- https://rubygems.org/gems/blazer/versions/3.5.0
19+
- https://github.com/ankane/blazer/blob/master/CHANGELOG.md#350-2026-07-27
20+
- https://github.com/ankane/blazer/compare/v3.4.0...v3.5.0
21+
- https://github.com/ankane/blazer/security/advisories/GHSA-m5f6-4589-m89f
22+
notes: |
23+
- cvss_v3 from project GHSA
24+
- No CVE

0 commit comments

Comments
 (0)