{"action":"Upgrade tmpdir to 0.1.2 or later.","affected":[{"fixed":"0.1.2","introduced":"0"}],"component":"tmpdir","cve_ids":["CVE-2021-28966"],"ecosystem":"RubyGems","epss":0.58039,"exploited":false,"fixed_versions":["0.1.2"],"ghsa_id":"GHSA-46f2-3v63-3xrp","id":"tcs_01M5KEGGANDQZQKZMJ91BYBA6Z","modified_at":"2025-01-27T08:58:38.818172Z","published_at":"2021-05-06T15:01:36Z","references":["https://osv.dev/vulnerability/GHSA-46f2-3v63-3xrp","https://nvd.nist.gov/vuln/detail/CVE-2021-28966","https://github.com/ruby/tmpdir/pull/8","https://github.com/ruby/tmpdir/commit/93798c01cb7c10476e50a4d80130a329ba47f348","https://hackerone.com/reports/1131465","https://github.com/ruby/tmpdir","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/tmpdir/CVE-2021-28966.yml","https://rubygems.org/gems/tmpdir","https://security.netapp.com/advisory/ntap-20210902-0004","https://www.ruby-lang.org/en/news/2021/04/05/tempfile-path-traversal-on-windows-cve-2021-28966"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-46f2-3v63-3xrp","url":"https://osv.dev/vulnerability/GHSA-46f2-3v63-3xrp"}],"summary":"Tempfile on Windows path traversal vulnerability"}