Framework Security Patch

[pglombardo]

Description

Here is a list of security issues that this release address:

1. CVE-2024-47887 Possible ReDoS vulnerability in HTTP Token authentication in Action Controller
2. CVE-2024-41128 Possible ReDoS vulnerability in query parameter filtering in Action Dispatch
3. CVE-2024-47888 Possible ReDoS vulnerability in plain_text_for_blockquote_node in Action Text
4. CVE-2024-47889 Possible ReDoS vulnerability in block_format in Action Mailer

Related Issue

Type of Change

• 📚 Examples / docs / tutorials / dependencies update
• 🔧 Bug fix (non-breaking change which fixes an issue)
• 🥂 Improvement (non-breaking change which improves an existing feature)
• 🚀 New feature (non-breaking change which adds functionality)
• 💥 Breaking change (fix or feature that would cause existing functionality to change)
• 🔐 Security fix

Checklist

• I've written tests (if applicable) for all new methods and classes that I created. (rake test)
• I've added documentation as necessary so users can easily use and understand this feature/fix.