Vulnerable to CVE-2023-22796 (Possible ReDoS based DoS vulnerability in Active Support’s underscore)

[kyrofa]

Vulnerable to CVE-2023-22796 (Possible ReDoS based DoS vulnerability in Active Support’s underscore)

[hsbt]

@indirect Thanks! I only release patch versions with tiny fixes. When we need to bump minor/major versions, we will ask to you.

[indirect]

Try updating it and running the specs, it might work! When that version was set, 6.0 wasn't out yet IIRC.

[kyrofa]

I was hoping that might be the case! Will do, thank you.

[kyrofa]

You were right, works fine. Please see #332.

[kyrofa]

@olleolleolle any chance we could see a new release containing the fix for this? Ignoring high severity vulns in my audits makes me a smidge queasy.

[hsbt]

@indirect Can you give an owner grant to @hsbt and @olleolleolle on rubygems.org? We can publish new version without your time.

[olleolleolle]

Good idea, I was under the wrong assumption that I was an owner, but I am not. I will prepare the CHANGELOG for now. We didn't have a note for the last release. Update: #334

[indirect]

@hsbt @olleolleolle owner invite sent to both 👍🏻

[olleolleolle]

v2.2.2 is now released. Thanks, all!

[kyrofa]

Thank you all, much appreciated!