[GHSA-785g-282q-pwvx] Rack CORS Middleware has Insecure File Permissions

[G-Rath]

Updates

• Affected products

Comments
cyu/rack-cors#274

I've also confirmed locally:

❯ ll rack-cors-2.0.0
total 52
drwxr-xr-x 4 jones jones 4096 Feb 27 13:54 ./
drwxr-xr-x 3 jones jones 4096 Feb 27 13:54 ../
-rw-rw-r-- 1 jones jones  540 Feb 27 13:54 .rubocop.yml
-rw-rw-r-- 1 jones jones  152 Feb 27 13:54 .travis.yml
-rw-rw-r-- 1 jones jones 2901 Feb 27 13:54 CHANGELOG.md
-rw-rw-r-- 1 jones jones  155 Feb 27 13:54 Gemfile
-rw-rw-r-- 1 jones jones 1066 Feb 27 13:54 LICENSE.txt
-rw-rw-r-- 1 jones jones 8067 Feb 27 13:54 README.md
-rw-rw-r-- 1 jones jones  494 Feb 27 13:54 Rakefile
drwxr-xr-x 3 jones jones 4096 Feb 27 13:54 lib/
-rw-rw-r-- 1 jones jones 1409 Feb 27 13:54 rack-cors.gemspec
drwxr-xr-x 4 jones jones 4096 Feb 27 13:54 test/

[darakian]

Not sure why the checks are failing, but merged this in manually. Many thanks 👍