CVE-2023-33460, ruby-yajl affected?
Anton Gladky <[email protected]> Wed, 5 Jul 2023 06:52:48 +0200
| Newsgroups | gmane.linux.debian.devel.lts,gmane.linux.debian.devel.security |
|---|---|
| Message-ID | <CALF6qJnB54MTcMXLFSj1vz1BA-J0mdUjEYGDjBiWrFk=ZLxVqg@mail.gmail.com> |
Hello, I am looking into CVE-2023-33460 and I am not sure that ruby-yajl is affected. There is no direct dependency on yajl, where the vulnerability was detected. Should ruby-yajl be unmarked as affected by this CVE? Thank you Anton