Skip to content

Releases: rails/globalid

v1.3.0

23 Sep 21:33
v1.3.0
a101021

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v1.2.1...v1.3.0

v1.2.1

17 Sep 17:12
v1.2.1
488ab6c

Choose a tag to compare

What's Changed

  • Don't break on models where primary_key is not defined by @ghiculescu in #168

New Contributors

Full Changelog: v1.2.0...v1.2.1

1.2.0

02 Sep 00:16
v1.2.0
27dff72

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v1.1.0...v1.2.0

1.1.0

25 Jan 18:50
v1.1.0
10673ef

Choose a tag to compare

What's Changed

New Contributors

Full Changelog: v1.0.1...v1.1.0

v1.0.1

17 Jan 21:43
v1.0.1
574b99f

Choose a tag to compare

Possible ReDoS based DoS vulnerability in GlobalID

There is a ReDoS based DoS vulnerability in the GlobalID gem. This
vulnerability has been assigned the CVE identifier CVE-2023-22799.

Versions Affected: >= 0.2.1
Not affected: NOTAFFECTED
Fixed Versions: 1.0.1

Impact

There is a possible DoS vulnerability in the model name parsing section of the
GlobalID gem. Carefully crafted input can cause the regular expression engine
to take an unexpected amount of time. All users running an affected release
should either upgrade or use one of the workarounds immediately.

Releases

The FIXED releases are available at the normal locations.

Workarounds

There are no feasible workarounds for this issue.

Credits

Thank you ooooooo_k for reporting this!

1.0.0

25 Nov 23:17
v1.0.0
42f5ea6

Choose a tag to compare

Stable API release.

The code is the same as the 0.6.0 release.

0.6.0

24 Nov 22:31
v0.6.0
beab3e4

Choose a tag to compare

  • Add ActiveRecord::FixtureSet.signed_global_id helper to generate signed ids inside fixtures.

v0.5.2

02 Aug 13:07
v0.5.2

Choose a tag to compare

  • Add back Ruby 2.5 support so gem install rails works out of the box, thereby satisfying Rails' Ruby version requirement. See rails/rails#42931

v0.5.1

27 Jul 21:06
v0.5.1

Choose a tag to compare

  • New: Allow expiration to be turned off globally #128
  • Fixed: Support for ruby-head #132
  • Maintainance: Drop support for EOL'ed Rubies (< 2.6.0) and Rails 4.2

v0.4.2

11 Jan 14:02

Choose a tag to compare

  • Allow configuration in initialisers 3c8f909

  • Clear to_global_id memoization on dup #109

  • Adds hash equality #108

Commits: v0.4.1...v0.4.2