RubyGems/ejson2env CVE-2025-48069: medium 6.6, EPSS 1.42%

Insufficient input sanitization in ejson2env

Action: Upgrade ejson2env to 2.0.8 or later.

bundle update ejson2env

Affected

Fixed versions

Sources

• osv: GHSA-2c47-m757-32g6#RubyGems/ejson2env
• https://github.com/Shopify/ejson2env/security/advisories/GHSA-2c47-m757-32g6
• https://nvd.nist.gov/vuln/detail/CVE-2025-48069
• https://github.com/Shopify/ejson2env/commit/592b3ceea967fee8b064e70983e8cec087b6d840
• https://github.com/Shopify/ejson2env
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ejson2env/CVE-2025-48069.yml

CVE-2025-48069 · published 2025-05-21T18:32:37Z · modified 2025-05-27T19:26:20.546533Z · JSON