← All advisories

Medium severity6.5NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026

CVE-2022-0578

CVE-2022-0578

Description

Code Injection in GitHub repository publify/publify prior to 9.2.8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
publify_coreRubyGems	< 9.2.8	9.2.8

Affected products

4

Publify Project/Publify
cpe:2.3:a:publify_project:publify:*:*:*:*:*:*:*:*
Range: <9.2.8
osv-coords2 versions
pkg:bitnami/publify pkg:gem/publify_core
< 9.2.8+ 1 more
- (no CPE)range: < 9.2.8
- (no CPE)range: < 9.2.8
Publify/Publify/publifyv5
Range: unspecified

Patches

Vulnerability mechanics

References

5

github.com/publify/publify/commit/b50df050c593cc532b2c516792989bcfce2d73f7nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/02c81928-eb47-476f-8000-e93dc796dbccnvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-w78q-4w34-jrjxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0578ghsaADVISORY
github.com/rubysec/ruby-advisory-db/blob/master/gems/publify_core/CVE-2022-0578.ymlghsaWEB

News mentions

0

No linked articles in our index yet.