{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"active-support","cve_ids":["CVE-2018-3779"],"ecosystem":"RubyGems","epss":0.06477,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2j55-pcw5-x4h2","id":"tcs_01M5KEFYHCZZJYF4YJN7ZGFB1F","modified_at":"2023-11-08T04:00:19.936014Z","published_at":"2018-08-13T15:02:49Z","references":["https://osv.dev/vulnerability/GHSA-2j55-pcw5-x4h2","https://nvd.nist.gov/vuln/detail/CVE-2018-3779","https://hackerone.com/reports/392311","https://github.com/advisories/GHSA-2j55-pcw5-x4h2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-2j55-pcw5-x4h2","url":"https://osv.dev/vulnerability/GHSA-2j55-pcw5-x4h2"},{"source":"nvd","source_id":"CVE-2018-3779","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3779"}],"summary":"active-support impersonates 'activesupport' gem"}