Ruby on Rails: v5.2.4.6 Release

Release date:
May 5, 2021
Previous version:
v5.2.4.5 (released February 10, 2021)
Magnitude:
21,542 Diff Delta
Contributors:
73 total committers
Data confidence:
Commits:

227 Features Released with v5.2.4.6

Top Contributors in v5.2.4.6

jorgemanrubia
byroot
kamipo
jhawthorn
rafaelfranca
eileencodes
fxn
jbampton
flavorjones
eugeneius

Directory Browser for v5.2.4.6

We haven't yet finished calculating and confirming the files and directories changed in this release. Please check back soon.

Release Notes Published

Active Support

  • No changes.

Active Model

  • No changes.

Active Record

  • No changes.

Action View

  • No changes.

Action Pack

  • Prevent regex DoS in HTTP token authentication CVE-2021-22904

  • Prevent string polymorphic route arguments.

    url_for supports building polymorphic URLs via an array of arguments (usually symbols and records). If a developer passes a user input array, strings can result in unwanted route helper calls.

    CVE-2021-22885

    Gannon McGibbon

Active Job

  • No changes.

Action Mailer

  • No changes.

Action Cable

  • No changes.

Active Storage

  • No changes.

Railties

  • No changes.