{"action":"Upgrade activeresource to 5.1.1 or later.","affected":[{"fixed":"5.1.1","introduced":"3.0.0.rc"}],"component":"activeresource","cve_ids":["CVE-2020-8151"],"ecosystem":"RubyGems","epss":0.02218,"exploited":false,"fixed_versions":["5.1.1"],"ghsa_id":"GHSA-46j2-xjgp-jrfm","id":"tcs_01M5KEGGKBTAHCECGGVTACHNPQ","modified_at":"2025-03-31T17:38:34.453180Z","published_at":"2020-05-21T21:09:38Z","references":["https://osv.dev/vulnerability/GHSA-46j2-xjgp-jrfm","https://nvd.nist.gov/vuln/detail/CVE-2020-8151","https://github.com/rails/activeresource/commit/0de18f7e96fa90bbf23b16ac11980bc2cb6a716e","https://github.com/rails/rails/commit/0e969bdaf8ff2e3384350687aa0b583f94d6dfbc","https://github.com/rails/activeresource","https://groups.google.com/forum/#!topic/rubyonrails-security/pktoF4VmiM8","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P7B7A4H22DZ522HLDS3JX3NX2CXIOZSR"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-46j2-xjgp-jrfm","url":"https://osv.dev/vulnerability/GHSA-46j2-xjgp-jrfm"}],"summary":"Information disclosure issue in Active Resource"}