Post

Ruby Central
@rubycentral.org

Security Advisory: Possible exposure of legacy RubyGems.org API keys. If you use RubyGems client < v3.2.0 or a legacy API key, review your account. No evidence of malicious use. Scoped API keys are not affected. buff.ly/u0xAec3

blog.rubygems.orgSecurity advisory: Possible leak of legacy API keys via improper cache configurationA CDN caching bug on RubyGems.org could hand one account’s API key to another person for up to an hour. If you signed in to RubyGems.org with a gem client older than v3.2.0, your key could have bee...

0 reposts1 like

No replies yet.