Échec pipeline audit n°581792
Problème rencontré
Le pipeline 581792 a échoué :
$ bundle exec bundle audit check --update
Download ruby-advisory-db ...
Cloning into '/root/.local/share/ruby-advisory-db'...
ruby-advisory-db:
advisories: 685 advisories
last updated: 2023-03-09 00:54:46 -0800
commit: 9bfad4be77cb1894b43c3ca37bb4dd60c60e872d
Name: rack
Version: 2.2.6.2
CVE: CVE-2023-27530
GHSA: GHSA-3h57-hmj3-gj3p
Criticality: Unknown
URL: https://discuss.rubyonrails.org/t/cve-2023-27530-possible-dos-vulnerability-in-multipart-mime-parsing/82388
Title: Possible DoS Vulnerability in Multipart MIME parsing
Solution: upgrade to '~> 2.0.9, >= 2.0.9.3', '~> 2.1.4, >= 2.1.4.3', '~> 2.2.6, >= 2.2.6.3', '>= 3.0.4.2'
Vulnerabilities found!
Cleaning up project directory and file based variables 00:01
ERROR: Job failed: exit code 1
Comment reproduire ?
- Considérant le code de Filaé
- Lorsque je lance
make audit-api
- Alors j'ai le message d'erreur ci-dessus
Comportement attendu
- Considérant le code de Filaé
- Lorsque je lance
make audit-api
- Alors je n'ai pas de message d'erreur