{"action":"Upgrade rest-client to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"1.6.10"}],"component":"rest-client","cve_ids":["CVE-2019-15224"],"ecosystem":"RubyGems","epss":0.0355,"exploited":false,"fixed_versions":["1.7.0"],"ghsa_id":"GHSA-333g-rpr4-7hxq","id":"tcs_01M5KEG2Z8CF7MD4C577KFVSWB","modified_at":"2024-02-16T08:10:46.997001Z","published_at":"2019-08-20T14:29:03Z","references":["https://osv.dev/vulnerability/GHSA-333g-rpr4-7hxq","https://nvd.nist.gov/vuln/detail/CVE-2019-15224","https://github.com/rest-client/rest-client/issues/713","https://github.com/rubygems/rubygems.org/issues/2097","https://github.com/rubygems/rubygems.org/wiki/Gems-yanked-and-accounts-locked#19-aug-2019","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/blockchain_wallet/CVE-2019-15224.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/coin_base/CVE-2019-15224.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/doge-coin/CVE-2019-15224.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lita_coin/CVE-2019-15224.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth_amazon/CVE-2019-15224.yml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rest-client/CVE-2019-15224.yml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-333g-rpr4-7hxq","url":"https://osv.dev/vulnerability/GHSA-333g-rpr4-7hxq"}],"summary":"rest-client Gem Contains Malicious Code"}