security advisoryXSSdebian
ruby-sidekiq, a simple, efficient background processing for Ruby, had a couple of vulnerabilities as follows: CVE-2021-30151 Sidekiq allows XSS via the queue name of the live-poll feature when Internet Explorer is used.. Debian LTS Advisory DLA-4407-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Utkarsh Gupta December 15, 2025 https://wiki.debian.org/LTS Package : ruby-sidekiq Version : 6.0.4+dfsg-2+deb11u1 CVE ID : CVE-2021-30151 CVE-2022-23837 Debian Bug : z987354 1004193 ruby-sidekiq, a simple, efficient background processing for Ruby, had a couple of vulnerabilities as follows: CVE-2021-30151 Sidekiq allows XSS via the queue name of the live-poll feature when Internet Explorer is used. CVE-2022-23837 In api.rb in Sidekiq, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting the Web UI, and makes it unavailable to users. For Debian 11 bullseye, these problems have been fixed in version 6.0.4+dfsg-2+deb11u1. We recommend that you upgrade your ruby-sidekiq packages. For the detailed security status of ruby-sidekiq please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/ruby-sidekiq Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ensure ruby-sidekiq is updated to address XSS and system overload issues revealed in current advisories.. Debian LTS, ruby-sidekiq, security update. . Severity: Important. LinuxSecurity.com Team
Dec 15, 2025
•Important
Debian LTS