{"action":"Upgrade activeadmin to 2.12.0 or later.","affected":[{"fixed":"2.12.0","introduced":"0"}],"component":"activeadmin","cve_ids":["CVE-2023-50448"],"ecosystem":"RubyGems","epss":0.00496,"exploited":false,"fixed_versions":["2.12.0"],"ghsa_id":"GHSA-356j-hg45-x525","id":"tcs_01M5KEG6GRYVRC69FRDFQFB127","modified_at":"2026-07-08T05:59:46.185286627Z","published_at":"2023-12-15T23:44:34Z","references":["https://osv.dev/vulnerability/GHSA-356j-hg45-x525","https://github.com/activeadmin/activeadmin/security/advisories/GHSA-356j-hg45-x525","https://nvd.nist.gov/vuln/detail/CVE-2023-50448","https://github.com/activeadmin/activeadmin/pull/7336","https://github.com/activeadmin/activeadmin","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activeadmin/CVE-2023-50448.yml"],"severity":{"label":"high","score":8.4},"sources":[{"source":"osv","source_id":"GHSA-356j-hg45-x525","url":"https://osv.dev/vulnerability/GHSA-356j-hg45-x525"}],"summary":"Potential CSV export data leak"}