{"action":"Upgrade active_attr to 0.15.4 or later.","affected":[{"fixed":"0.15.4","introduced":"0"}],"component":"active_attr","cve_ids":["CVE-2021-4250"],"ecosystem":"RubyGems","epss":0.0118,"exploited":false,"fixed_versions":["0.15.4"],"ghsa_id":"GHSA-4whf-rmx5-8frv","id":"tcs_01M5KEGQF3E174JWDR3MM3Q2EG","modified_at":"2023-11-08T04:07:06.516123Z","published_at":"2022-12-19T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-4whf-rmx5-8frv","https://nvd.nist.gov/vuln/detail/CVE-2021-4250","https://github.com/cgriego/active_attr/issues/184","https://github.com/cgriego/active_attr/pull/185","https://github.com/cgriego/active_attr/commit/dab95e5843b01525444b82bd7b336ef1d79377df","https://github.com/cgriego/active_attr","https://github.com/cgriego/active_attr/releases/tag/v0.15.3","https://github.com/cgriego/active_attr/releases/tag/v0.15.4","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/active_attr/CVE-2021-4250.yml","https://vuldb.com/?id.216207"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4whf-rmx5-8frv","url":"https://osv.dev/vulnerability/GHSA-4whf-rmx5-8frv"}],"summary":"active_attr Improper Resource Shutdown or Release vulnerability"}