{"action":"Upgrade cgi to 0.1.0.1 or later.","affected":[{"fixed":"0.3.1","introduced":"0.3.0"},{"fixed":"0.2.1","introduced":"0.2.0"},{"fixed":"0.1.0.1","introduced":"0"}],"component":"cgi","cve_ids":["CVE-2021-41819"],"ecosystem":"RubyGems","epss":0.03151,"exploited":false,"fixed_versions":["0.3.1","0.2.1","0.1.0.1"],"ghsa_id":"GHSA-4vf4-qmvg-mh7h","id":"tcs_01M5KEGQ038R28HJTKY2114T58","modified_at":"2025-01-27T08:58:40.724504Z","published_at":"2022-01-21T23:22:17Z","references":["https://osv.dev/vulnerability/GHSA-4vf4-qmvg-mh7h","https://nvd.nist.gov/vuln/detail/CVE-2021-41819","https://hackerone.com/reports/910552","https://github.com/ruby/cgi","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2021-41819.yml","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF","https://security.gentoo.org/glsa/202401-27","https://security.netapp.com/advisory/ntap-20220121-0003","https://www.ruby-lang.org/en/news/2021/11/24/cookie-prefix-spoofing-in-cgi-cookie-parse-cve-2021-41819"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4vf4-qmvg-mh7h","url":"https://osv.dev/vulnerability/GHSA-4vf4-qmvg-mh7h"}],"summary":"Cookie Prefix Spoofing in CGI::Cookie.parse"}