{"action":"Upgrade dependabot-omnibus to 0.125.1 or later.","affected":[{"fixed":"0.125.1","introduced":"0.119.0.beta1"}],"component":"dependabot-omnibus","cve_ids":["CVE-2020-26222"],"ecosystem":"RubyGems","epss":0.03088,"exploited":false,"fixed_versions":["0.125.1"],"ghsa_id":"GHSA-23f7-99jx-m54r","id":"tcs_01M5KEFS9JWHKY05ND5G8AN3JN","modified_at":"2026-07-08T06:29:09.252313036Z","published_at":"2020-11-13T15:47:50Z","references":["https://osv.dev/vulnerability/GHSA-23f7-99jx-m54r","https://github.com/dependabot/dependabot-core/security/advisories/GHSA-23f7-99jx-m54r","https://nvd.nist.gov/vuln/detail/CVE-2020-26222","https://github.com/dependabot/dependabot-core/pull/2727","https://github.com/dependabot/dependabot-core/commit/e089116abbe284425b976f7920e502b8e83a61b5","https://github.com/dependabot/dependabot-core","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/dependabot-common/CVE-2020-26222.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/dependabot-omnibus/CVE-2020-26222.yml","https://rubygems.org/gems/dependabot-common","https://rubygems.org/gems/dependabot-omnibus"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-23f7-99jx-m54r","url":"https://osv.dev/vulnerability/GHSA-23f7-99jx-m54r"}],"summary":"Remote code execution in dependabot-core branch names when cloning"}