Advisories for Gem/Web-Console package

Specially crafted remote requests can spoof their origin, bypassing the IP allowlist, in any environment where Web Console is enabled (development and test, by default).To work around this issue, turn off web-console in all environments, by removing/commenting it from the application's Gemfile.

Web Console Gem contains an unspecified flaw. This impact of this security issue is unknown.