{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.6"}],"component":"goliath","cve_ids":["CVE-2020-7671"],"ecosystem":"RubyGems","epss":0.01262,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3892-2r52-p65m","id":"tcs_01M5KEG84YHXTC9XN98AFK70H7","modified_at":"2026-07-08T06:49:31.589069097Z","published_at":"2021-05-24T18:20:07Z","references":["https://osv.dev/vulnerability/GHSA-3892-2r52-p65m","https://nvd.nist.gov/vuln/detail/CVE-2020-7671","https://github.com/postrank-labs/goliath/issues/351","https://github.com/postrank-labs/goliath","https://snyk.io/vuln/SNYK-RUBY-GOLIATH-569136"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-3892-2r52-p65m","url":"https://osv.dev/vulnerability/GHSA-3892-2r52-p65m"}],"summary":"HTTP Request Smuggling in goliath"}