Skip to content
OpenAdvisories

Package · RubyGems

update_by_case

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.8
    CVE-2022-35956

    update_by_case before 0.1.3 vulnerable to sql injection

    This Rails gem adds two methods to the ActiveRecord::Base class that allow you to update many records on a single database hit, using a case sql statement for it. Before version 0.1.3 `update_by_case` gem used custom sql strings, and it was not sanitized, mak…

    camilova activerecord-update-by-case update_by_case RubyGems