Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and ungetc methods on a StringIO can read past the end of a string, and a subsequent call to StringIO.gets may return the memory value. 3.0.3 is the main fixed version; however, for Ruby 3.0 users, a fixed version is stringio 3.0.1.1, and for Ruby 3.1 users, a fixed version is stringio 3.0.1.2.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
StringIO 安全漏洞
Vulnerability Description
StringIO是The Ruby Programming Language开源的一个 Ruby 输入输出库。 StringIO 3.0.2及之前版本存在安全漏洞，该漏洞源于存在缓冲区重写问题。
CVSS Information
N/A
Vulnerability Type
N/A