Critical · 9.8 CVE-2018-18476 EUVD-2018-0519GHSA-6j63-35hj-vmcg

mysql-bunuuid-rails vulnerable to SQL injection

Published Oct 24, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.

Ecosystem	Package	Affected	Fixed	Record
RubyGems	mysql-binuuid-rails	< 1.1.1	1.1.1	GHSA-6j63-35hj-vmcg