Skip to content
This repository was archived by the owner on Apr 18, 2026. It is now read-only.
This repository was archived by the owner on Apr 18, 2026. It is now read-only.

Old gem lock #84

@gfrankliu

Description

@gfrankliu

When I do a gem install fluent-plugin-detect-exceptions, the generate file gems/fluent-plugin-detect-exceptions-0.0.13/Gemfile.lock has

...
    rake (10.5.0)
    rubocop (0.42.0)
...

trivy scan report gives this:

================================================================================
Total: 2 (UNKNOWN: 0, LOW: 1, MEDIUM: 0, HIGH: 1, CRITICAL: 0)

+---------+------------------+----------+-------------------+---------------+--------------------------------------+
| LIBRARY | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION |                TITLE                 |
+---------+------------------+----------+-------------------+---------------+--------------------------------------+
| rake    | CVE-2020-8130    | HIGH     | 10.5.0            | 12.3.3        | rake: OS Command Injection           |
|         |                  |          |                   |               | via egrep in Rake::FileList          |
|         |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2020-8130 |
+---------+------------------+----------+-------------------+---------------+--------------------------------------+
| rubocop | CVE-2017-8418    | LOW      | 0.42.0            | 0.49.0        | RuboCop: insecure use of /tmp        |
|         |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2017-8418 |
+---------+------------------+----------+-------------------+---------------+--------------------------------------+

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions