guard-livereload Ruby Gem Directory Traversal Vulnerability Under Investigation
The guard-livereload Ruby gem reportedly has a directory traversal vulnerability that may allow remote attackers to read arbitrary files on the server. This issue is under investigation.
What happened
An early warning has been issued regarding a directory traversal vulnerability in the guard-livereload Ruby gem. This vulnerability, tracked as GHSA-G65V-27R3-5P6M, appears to allow remote attackers to read arbitrary files on the server. The vulnerability is present in versions of guard-livereload prior to 2.5.2. It is recommended to upgrade to version 2.5.2 or later to mitigate potential risks. For more detailed information, consult the primary sources linked in the summary.
How 0Day mitigates this
guard-livereload is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.