{"action":"No fix published. Pin and monitor.","affected":[],"component":"sprout","cve_ids":["CVE-2013-6421"],"ecosystem":"RubyGems","epss":0.01971,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-229r-pqp6-8w6g","id":"tcs_01M5KEFRND9T2588EHC37BB46M","modified_at":"2023-11-08T03:57:26.490474Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-229r-pqp6-8w6g","https://nvd.nist.gov/vuln/detail/CVE-2013-6421","https://github.com/lukebayes/project-sprouts","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sprout/CVE-2013-6421.yml","http://archives.neohapsis.com/archives/bugtraq/2013-12/0077.html","http://vapid.dhs.org/advisories/sprout-0.7.246-command-inj.html","http://www.openwall.com/lists/oss-security/2013/12/03/1","http://www.openwall.com/lists/oss-security/2013/12/03/6"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-229r-pqp6-8w6g","url":"https://osv.dev/vulnerability/GHSA-229r-pqp6-8w6g"}],"summary":"sprout Arbitrary Code Execution vulnerability"}