Exploitation of an old Rails vulnerability

Re:Exploitation of an old Rails vulnerability by astrodust on Monday May 27, 2013 @09:42PM (#5777542)

Thus, if you don't know what you're doing, subscribe to a service like Gem Canary (http://gemcanary.com/) so you get alerts.

[ Parent | on HN ]

Re:Exploitation of an old Rails vulnerability by borski on Tuesday May 28, 2013 @01:38AM (#5778291)

We also have a mailing list we regularly send out updates to that we set up after the Rails vuln fiasco - you can sign up for it here, if interested: https://www.tinfoilsecurity.com/railscheck

[ Parent | on HN ]

Re:Exploitation of an old Rails vulnerability by graue on Tuesday May 28, 2013 @05:23AM (#5779034)

I like this. Is there anything comparable for Python or Node.js?

[ Parent | on HN ]

Re:Exploitation of an old Rails vulnerability by sirclueless on Tuesday May 28, 2013 @07:30AM (#5779323)

Yes, try https://bundlescout.com/

Also http://getshrubbery.com/home which is free, but seemed mildly broken when I tried it (it seemed to forget some of my actually outdated packages when I tried it).

[ Parent | on HN ]

Re:Exploitation of an old Rails vulnerability by quarterto on Tuesday May 28, 2013 @12:30PM (#5780974)

Try https://david-dm.org/ for node.js.

[ Parent | on HN ]