Repository navigation
guard-livereload security vulnerability #289
Description
Activity
We're definitely missing this issue - but what part is invalid?
That is part of DWF, which is a newly minted CNA. MITRE has not fully setup the process to automatically pull in and process DWF-assigned IDs. That is the official DWF GitHub though, so any assignment information there is legitimate.
Reacted by Michael CoyneNOTE: Found that this gem has not been released after fixing this vulnerability in release 2.5.2.
See reference for gem rack-livereload in the last commit done.Hi @postmodern @jasnow ,
I’ve already started investigating this guard-livereload vulnerability and reviewing the CVE/DWF references. Could you please assign this issue to me so I can continue working on it and prepare a PR with the necessary updates? Thanks!- added a commit that references this issue
on Mar 31, 2026 Here is link for the JSON file mentioned above: https://github.com/puiterwijk/DWF-Database-Artifacts/blob/master/DWF/2016/1000305/CVE-2016-1000305.json
Another reference: https://stackoverflow.com/questions/16665941/guard-livereload-on-windows
guard/guard-livereload#159
CVE seems to be invalid:
https://github.com/distributedweaknessfiling/DWF-Database-Artifacts/blob/158c10cf11bc7d6ad728c1a8dd213f523ecfca52/DWF/2016/1000305/CVE-2016-1000305.json