heartcombo/simple_form

heartcombo/simple_form

GitHubGitHub
GitHubgithub.com
blog.plataformatec.com.brblog.plataformatec.com.br
Releases61
Frequency3 months 5 days
Last Release
Stars8.23K
Forms made easy for Rails! It's tied to a simple DSL, with no opinion on markup.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2019-16676NVD↗
< 5.0, < 5.0.09.8 CRITICAL7.5 HIGH

Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-supplied string is invoked as a method call.