Mark rack-cors 2.0.2 as resolving CVE-2024-27456 (#760)

* cyu/rack-cors#274
rubysec · Mar 4, 2024 · d7edb7c · d7edb7c
1 parent b904407
commit d7edb7c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/gems/rack-cors/CVE-2024-27456.yml b/gems/rack-cors/CVE-2024-27456.yml
@@ -8,9 +8,10 @@ date: 2024-02-26
 description: |
   rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions
   for the .rb files.
-notes: Not yet patched
 unaffected_versions:
   - "< 2.0.1"
+patched_versions:
+  - ">= 2.0.2"
 related:
   url:
     - https://nvd.nist.gov/vuln/detail/CVE-2024-27456