Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

RubyGems package

guard-livereload

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 6.9RubyGemsAmendedPublished

    guard-livereload has a directory traversal vulnerability

    CVE-2016-1000305 · GHSA-g65v-27r3-5p6m

    Affected
    • RubyGems guard-livereload < 2.5.2
    Fixed in
    2.5.2· Vendor fix available
    Issue
    The vulnerability allows remote attackers to read arbitrary files on the server by exploiting improper path validation in the livereload server functionality. This vulnerability is related to the handling of file paths in the livereload server component, which could allow an attacker to traverse directories and access files outside the intended web root directory. The issue was identified and reported through the DWF (Distributed Weakness Filing) project, which assigns CVE identifiers for security vulnerabilities. A directory traversal vulnerability exists in guard-livereload before version 2.5.2.

    Recommended action: Upgrade to 2.5.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →