{"action":"Upgrade jekyll to 3.6.3 or later.","affected":[{"fixed":"3.6.3","introduced":"0"},{"fixed":"3.7.4","introduced":"3.7.0"},{"fixed":"3.8.4","introduced":"3.8.0"}],"component":"jekyll","cve_ids":["CVE-2018-17567"],"ecosystem":"RubyGems","epss":0.02188,"exploited":false,"fixed_versions":["3.6.3","3.7.4","3.8.4"],"ghsa_id":"GHSA-4xjh-m3qx-49wc","id":"tcs_01M5KEGR9FW49N5Y4SNAQ43XQ9","modified_at":"2024-02-18T05:32:07.925067Z","published_at":"2018-09-28T19:29:07Z","references":["https://osv.dev/vulnerability/GHSA-4xjh-m3qx-49wc","https://nvd.nist.gov/vuln/detail/CVE-2018-17567","https://github.com/jekyll/jekyll/pull/7224","https://github.com/jekyll/jekyll","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jekyll/CVE-2018-17567.yml","https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8","https://lists.apache.org/thread.html/71da391f584b2fb301d2df0e491b279d87287e2fb4b11309f04ad984@%3Ccommits.accumulo.apache.org%3E"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-4xjh-m3qx-49wc","url":"https://osv.dev/vulnerability/GHSA-4xjh-m3qx-49wc"}],"summary":"Jekyll allows attackers to access arbitrary files by specifying a symlink"}