Skip to content
OpenAdvisories
High DLA-1419-1 1 CVE

ruby-sprockets - security update

Published Jul 12, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 ruby-sprockets 2.12.3-1+deb8u1

Vulnerabilities 1

  • High 7.5
    CVE-2018-3760 Public exploit Scanner template EPSS 26%

    Sprockets path traversal leads to information leak

    There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root di…

    HackerOne Sprockets sprockets ruby-sprockets Debian Ubuntu RubyGems