{"action":"Upgrade private_address_check to 0.4.1 or later.","affected":[{"fixed":"0.4.1","introduced":"0"}],"component":"private_address_check","cve_ids":["CVE-2017-0909"],"ecosystem":"RubyGems","epss":0.02032,"exploited":false,"fixed_versions":["0.4.1"],"ghsa_id":"GHSA-3v3c-r5v2-68ph","id":"tcs_01M5KEGDX6V7X1YJK95FN9HE2Z","modified_at":"2024-12-06T05:34:39.948583Z","published_at":"2017-11-30T23:14:55Z","references":["https://osv.dev/vulnerability/GHSA-3v3c-r5v2-68ph","https://nvd.nist.gov/vuln/detail/CVE-2017-0909","https://github.com/jtdowney/private_address_check/pull/3","https://hackerone.com/reports/288950","https://github.com/advisories/GHSA-3v3c-r5v2-68ph","https://github.com/jtdowney/private_address_check"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-3v3c-r5v2-68ph","url":"https://osv.dev/vulnerability/GHSA-3v3c-r5v2-68ph"}],"summary":"private_address_check contains Incomplete List of Disallowed Inputs"}