In response to the announcement of CVE-2016-6316 and CVE-2016-6317, Brakeman Pro 1.3.1 has been released with rules to detect affected applications.

Since CVE-2016-6316 affects a core helper method (content_tag), it is strongly suggested that all Rails applications update to Rails 3.2.22.4, 4.2.7.1, or 5.0.0.1, as appropriate.

If you have not purchased Brakeman Pro yet, you can view our pricing and purchase licenses directly from our site.

Need to try Brakeman Pro first? We also offer a free trial version to test it out. (Note: if you have already downloaded a trial version in the past, use that same link to download the latest version.)

Please feel free to contact us at support@brakemanpro.com with any questions!