{"action":"Upgrade sidekiq to 6.5.10 or later.","affected":[{"fixed":"7.1.3","introduced":"7.0.0"},{"fixed":"6.5.10","introduced":"0"}],"component":"sidekiq","cve_ids":["CVE-2023-26141"],"ecosystem":"RubyGems","epss":0.00939,"exploited":false,"fixed_versions":["7.1.3","6.5.10"],"ghsa_id":"GHSA-3qc2-v3hp-6cv8","id":"tcs_01M5KEGDRH8J80MCVR01GWHVH6","modified_at":"2024-02-16T08:13:11.075742Z","published_at":"2023-09-14T06:30:19Z","references":["https://osv.dev/vulnerability/GHSA-3qc2-v3hp-6cv8","https://nvd.nist.gov/vuln/detail/CVE-2023-26141","https://github.com/sidekiq/sidekiq/commit/62c90d7c5a7d8a378d79909859d87c2e0702bf89","https://gist.github.com/keeganparr1/1dffd3c017339b7ed5371ed3d81e6b2a","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sidekiq/CVE-2023-26141.yml","https://github.com/sidekiq/sidekiq","https://github.com/sidekiq/sidekiq/blob/6-x/Changes.md#6510","https://github.com/sidekiq/sidekiq/blob/6-x/web/assets/javascripts/dashboard.js#L6","https://github.com/sidekiq/sidekiq/blob/6-x/web/assets/javascripts/dashboard.js%23L6","https://security.snyk.io/vuln/SNYK-RUBY-SIDEKIQ-5885107"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-3qc2-v3hp-6cv8","url":"https://osv.dev/vulnerability/GHSA-3qc2-v3hp-6cv8"}],"summary":"sidekiq Denial of Service vulnerability"}