{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.4"}],"component":"karteek-docsplit","cve_ids":["CVE-2013-1933"],"ecosystem":"RubyGems","epss":0.01793,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4fvg-pwv7-v54g","id":"tcs_01M5KEGKTMW01TWSSZJ49JQZ51","modified_at":"2023-11-08T03:57:16.316611Z","published_at":"2022-05-17T01:36:24Z","references":["https://osv.dev/vulnerability/GHSA-4fvg-pwv7-v54g","https://nvd.nist.gov/vuln/detail/CVE-2013-1933","https://exchange.xforce.ibmcloud.com/vulnerabilities/83277","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/karteek-docsplit/CVE-2013-1933.yml","http://vapid.dhs.org/advisories/karteek-docsplit-cmd-inject.html","http://www.openwall.com/lists/oss-security/2013/04/08/15"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-4fvg-pwv7-v54g","url":"https://osv.dev/vulnerability/GHSA-4fvg-pwv7-v54g"}],"summary":"Karteek Docsplit vulnerable to OS Command Injection"}