Skip to content

Security patches: update json and rails gems#1968

Open
jbirdjavi wants to merge 1 commit into
masterfrom
security-patches-json-rails-2026-03
Open

Security patches: update json and rails gems#1968
jbirdjavi wants to merge 1 commit into
masterfrom
security-patches-json-rails-2026-03

Conversation

@jbirdjavi
Copy link
Copy Markdown
Contributor

Summary

  • Updates json gem (2.18.1 → 2.19.3) to address CVE-2026-33210 (format string injection)
  • Updates Rails gems (7.2.3 → 7.2.3.1) to address CVE-2026-33658 (ActiveStorage DoS via multi-range requests)

Test plan

  • CI should pass with updated gems
  • No application code changes required

🤖 Generated with Claude Code

- CVE-2026-33210: JSON format string injection (json gem)
- CVE-2026-33658: ActiveStorage DoS via multi-range requests (Rails)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@stage-branch-merger
Copy link
Copy Markdown

I see you added the "On Staging" label, I'll get this merged to the staging branch!

@stage-branch-merger
Copy link
Copy Markdown

Merge conflict attempting to merge this into staging. Please fix manually.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants