Skip to content

Commit fb5acb3

Browse files
OMpawar-21claude
andcommitted
fix: upgrade json to 2.21.2 to remediate CVE-2026-71847 (CVSS 8.7 High)
Bumps json gem from 2.20.0 to 2.21.2 to fix a Use After Free vulnerability (CWE-416) in JSON::ResumableParser#partial_value. Bumps SDK version to 0.10.1. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent e1e44df commit fb5acb3

3 files changed

Lines changed: 10 additions & 3 deletions

File tree

CHANGELOG.md

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,12 @@
11
## CHANGELOG
22

3+
## Version 0.10.1
4+
### Date: 13th-August-2026
5+
### Security
6+
- Upgraded `json` dependency from `2.20.0` to `2.21.2` to remediate CVE-2026-71847 (SNYK-RUBY-JSON-18599450) — Use After Free (CWE-416) in `JSON::ResumableParser#partial_value`, CVSS 8.7 High.
7+
8+
------------------------------------------------
9+
310
## Version 0.10.0
411
### Date: 27th-July-2026
512
### Features

Gemfile.lock

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ GEM
3939
hashdiff (1.2.1)
4040
i18n (1.14.8)
4141
concurrent-ruby (~> 1.0)
42-
json (2.20.0)
42+
json (2.21.2)
4343
logger (1.7.0)
4444
minitest (6.0.6)
4545
drb (~> 2.0)
@@ -127,7 +127,7 @@ CHECKSUMS
127127
drb (2.2.3) sha256=0b00d6fdb50995fe4a45dea13663493c841112e4068656854646f418fda13373
128128
hashdiff (1.2.1) sha256=9c079dbc513dfc8833ab59c0c2d8f230fa28499cc5efb4b8dd276cf931457cd1
129129
i18n (1.14.8) sha256=285778639134865c5e0f6269e0b818256017e8cde89993fdfcbfb64d088824a5
130-
json (2.20.0) sha256=9362bc6e55a952b056abf9167cf053358181c904cb70cd6eee0808ea830fc32b
130+
json (2.21.2) sha256=1f1d3b7cf2b3ba1a69beca0bb6db13d5438b80bff3cd54cdaaa620b9b07c1c6a
131131
logger (1.7.0) sha256=196edec7cc44b66cfb40f9755ce11b392f21f7967696af15d274dde7edff0203
132132
minitest (6.0.6) sha256=153ea36d1d987a62942382b61075745042a2b3123b1cd48f4c3675af9cc7d6f1
133133
nokogiri (1.19.3-aarch64-linux-gnu) sha256=46b89e5d7b9e844c2ee360794240c6ea2a4e6fa0c5892a4ed487db621224b639

lib/contentstack/version.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
module Contentstack
2-
VERSION = "0.10.0"
2+
VERSION = "0.10.1"
33
end

0 commit comments

Comments
 (0)