Thoughtbot Paperclip vulnerabilities

• thoughtbot paperclip, paperclip ruby gem +1 more paperclip Server-Side Request Forgery vulnerability CVE-2017-0889 Fix available 9.8 CriticalNovember 13, 2017
• thoughtbot paperclip paperclip Cross-site Scripting vulnerability CVE-2015-2963 Fix available 4.3 MediumJuly 10, 2015