Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Date/DateTime leads to empty changeset #1462

Closed
tangopium opened this issue Feb 11, 2024 · 3 comments
Closed

Date/DateTime leads to empty changeset #1462

tangopium opened this issue Feb 11, 2024 · 3 comments
Labels

Comments

@tangopium
Copy link

I' using PaperTrail 15.1.0. If I have a version where object_changes contain either a Date or DateTime, the changeset of this version is empty.

You can use the following object_changes as an example:

---
content:
- abc
- def
updated_at:
- 2023-10-23
- 2024-02-11

If I remove the updated_at from the object_changes I get the correct changeset.

@tangopium
Copy link
Author

The issue & solution is actually described here: https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017. Maybe you can address this issue as well directly in PaperTrail?

Copy link

This issue has been automatically marked as stale due to inactivity.
The resources of our volunteers are limited.
Bug reports must provide a script that reproduces the bug, using our template. Feature suggestions must include a promise to build the feature yourself.
Thank you for all your contributions.

@github-actions github-actions bot added the Stale label May 12, 2024
@github-actions github-actions bot closed this as not planned Won't fix, can't repro, duplicate, stale May 19, 2024
@tangopium
Copy link
Author

I suggest reopen the ticket as this is a severe issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant