VDB
Sign up
MEDIUM5.9

GHSA-m7p8-9w66-9frm

net-ldap Improper Certificate Validation vulnerability

Quick fix

GHSA-m7p8-9w66-9frm — net-ldap: upgrade to the fixed version with the command below.

bundle update net-ldap

Details

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

Are you affected?

Enter the version of the package you're using.

Affected packages

RubyGems/net-ldap
Introduced in: 0Fixed in: 0.16.0
Fixbundle update net-ldap

References