Patch Your Trilogy Too: SQL Injection

ruby dev.to

If you upgraded to Rails 8.0.5.2 or 8.1.4.1 after my post on the 21 security fixes and your app runs on MySQL through Trilogy, there's one more gem to update. Six days before the Rails release, Trilogy published a critical SQL injection advisory, GHSA-744p-w4gc-m3gh (a GitHub Security Advisory ID). It isn't part of the Rails batch, and upgrading Rails doesn't pull in the fix. Trilogy is the MySQL client gem behind Rails' trilogy database adapter, the alternative to mysql2. The advisory has no C

Read Full Tutorial open_in_new
arrow_back Back to Tutorials