Skip to content

Échec pipeline audit n°563771

Problème rencontré

Le pipeline 563771 a échoué :

$ bundle exec bundle audit check --update
Download ruby-advisory-db ...
Cloning into '/root/.local/share/ruby-advisory-db'...
ruby-advisory-db:
  advisories:	630 advisories
  last updated:	2023-01-08 20:24:46 -0800
  commit:	55138bfa7c4eb2d9354493bf95c165aa8386351d
Name: httparty
Version: 0.18.1
GHSA: GHSA-5pq7-52mg-hr42
Criticality: Medium
URL: https://github.com/jnunemaker/httparty/security/advisories/GHSA-5pq7-52mg-hr42
Title: httparty has multipart/form-data request tampering vulnerability
Solution: upgrade to '>= 0.21.0'
Vulnerabilities found!

Comment reproduire ?

  1. Considérant le code de Filaé
  2. Lorsque je lance make audit-api
  3. Alors j'ai le message d'erreur ci-dessus

Comportement attendu

  1. Considérant le code de Filaé
  2. Lorsque je lance make audit-api
  3. Alors je n'ai pas de message d'erreur