{"action":"Upgrade spina to 0.6.29 or later.","affected":[{"fixed":"0.6.29","introduced":"0"}],"component":"spina","cve_ids":["CVE-2015-4619"],"ecosystem":"RubyGems","epss":0.00903,"exploited":false,"fixed_versions":["0.6.29"],"ghsa_id":"GHSA-2hxv-mx8x-mcj9","id":"tcs_01M5KEFY3PGR5E4YPJN7AZ6EAE","modified_at":"2024-02-16T08:14:22.693287Z","published_at":"2018-08-28T22:34:22Z","references":["https://osv.dev/vulnerability/GHSA-2hxv-mx8x-mcj9","https://nvd.nist.gov/vuln/detail/CVE-2015-4619","https://github.com/denkGroot/Spina/commit/bfe44f289e336f80b6593032679300c493735e75","https://github.com/denkGroot/Spina","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/spina/CVE-2015-4619.yml","http://www.openwall.com/lists/oss-security/2015/06/16/11","http://www.openwall.com/lists/oss-security/2015/06/16/20","http://www.securityfocus.com/bid/75216"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-2hxv-mx8x-mcj9","url":"https://osv.dev/vulnerability/GHSA-2hxv-mx8x-mcj9"}],"summary":"Spina gem vulnerable to Cross-site request forgery (CSRF) vulnerability"}