Correctly exclude 4.0.0.beta* from unaffected_versions (closes #151…

…). * This will match versions `3.X.X` as unaffected, but still flag versions `4.0.0.beta1` and `4.0.0.beta2` as affected.
rubysec · May 23, 2023 · 6084481 · 6084481
1 parent e26e041
commit 6084481
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/gems/passenger/CVE-2012-6135.yml b/gems/passenger/CVE-2012-6135.yml
@@ -14,6 +14,6 @@ description: |
 cvss_v2: 2.1
 cvss_v3: 7.5
 unaffected_versions:
-  - "< 4.0.0"
+  - "< 4.0.0.beta"
 patched_versions:
   - ">= 4.0.0"