Showing posts with label Padrinorb. Show all posts
Showing posts with label Padrinorb. Show all posts

Monday, 8 April 2013

Padrino 0.11.1 Released - Bug fix release

Wednesday, 27 February 2013

Blog Upgrade Rack immediately - Padrino Ruby Web Framework

All Rack users, including all Padrino users, should upgrade their Rack dependency as soon as possible. Multiple severe issues have been found, one of them including a potential remote code execution. This is espcially important if you are using Rack::Session::Cookie, which Padrino activates by default. See the Rack website for details.

Blog JSON gem vulnerability - Padrino Ruby Web Framework

An vulnerability affecting the json gem has been found. A detailed explanation can be found at the Rails security mailing list . This is not an isolated Rails issue, as it affects a third-party library. It affects all users of the json gem. This gem might be pulled in as a dependency of other libraries in use.