Patch Your Trilogy Too: SQL Injection
ruby
dev.to
If you upgraded to Rails 8.0.5.2 or 8.1.4.1 after my post on the 21 security fixes and your app runs on MySQL through Trilogy, there's one more gem to update. Six days before the Rails release, Trilogy published a critical SQL injection advisory, GHSA-744p-w4gc-m3gh (a GitHub Security Advisory ID). It isn't part of the Rails batch, and upgrading Rails doesn't pull in the fix. Trilogy is the MySQL client gem behind Rails' trilogy database adapter, the alternative to mysql2. The advisory has no C