AIKIDO-2024-10421
rspec-its is vulnerable to Access to Critical Private Variable via Public Method
69
Medium Risk
This Affects:
rspec-itsTL;DR
Affected versions of the package expose private variables via public methods because they do not use public_send when exposing an object's methods. This allows unintended access to private or protected variables, potentially compromising the integrity and security of the application by permitting users to access internal object states that should be hidden.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
rspec-its is vulnerable to Access to Critical Private Variable via Public Method in versions 1.0.0 - 1.3.1.
How to fix this
Upgrade the rspec-its library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant