{"action":"Upgrade restforce to 3.0.0 or later.","affected":[{"fixed":"3.0.0","introduced":"0"}],"component":"restforce","cve_ids":["CVE-2018-3777"],"ecosystem":"RubyGems","epss":0.01506,"exploited":false,"fixed_versions":["3.0.0"],"ghsa_id":"GHSA-534w-937m-v7x3","id":"tcs_01M5KEGTHF0ZVR46G1DMJPC15Q","modified_at":"2024-02-16T08:08:58.530532Z","published_at":"2018-08-03T21:04:02Z","references":["https://osv.dev/vulnerability/GHSA-534w-937m-v7x3","https://nvd.nist.gov/vuln/detail/CVE-2018-3777","https://github.com/restforce/restforce/pull/392","https://github.com/advisories/GHSA-534w-937m-v7x3","https://github.com/restforce/restforce","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/restforce/CVE-2018-3777.yml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-534w-937m-v7x3","url":"https://osv.dev/vulnerability/GHSA-534w-937m-v7x3"}],"summary":"restforce vulnerable to Improper Input Validation"}