{"action":"Upgrade rdoc to 6.3.4.1 or later.","affected":[{"fixed":"6.3.4.1","introduced":"6.3.3"},{"fixed":"6.4.1.1","introduced":"6.4.0"},{"fixed":"6.5.1.1","introduced":"6.5.0"},{"fixed":"6.6.3.1","introduced":"6.6.0"}],"component":"rdoc","cve_ids":["CVE-2024-27281"],"ecosystem":"RubyGems","epss":0.01571,"exploited":false,"fixed_versions":["6.3.4.1","6.4.1.1","6.5.1.1","6.6.3.1"],"ghsa_id":"GHSA-592j-995h-p23j","id":"tcs_01M5KEGYSH3EPS0AGZF6CT4PBZ","modified_at":"2026-09-10T03:50:10.192369634Z","published_at":"2024-03-25T19:36:59Z","references":["https://osv.dev/vulnerability/GHSA-592j-995h-p23j","https://nvd.nist.gov/vuln/detail/CVE-2024-27281","https://github.com/ruby/rdoc/commit/1254b0066f312ddbf7fae7a195e66ce5b3bc6656","https://github.com/ruby/rdoc/commit/32ff6ba0bebd8ea26f569da5fd23be2937f6a644","https://github.com/ruby/rdoc/commit/48617985e9fbc2825219d55f04e3e0e98d2923be","https://github.com/ruby/rdoc/commit/811f125a4a0cc968e3eb18e16ea6c1a3b49a11bf","https://github.com/ruby/rdoc/commit/a5de13bf0f0c26f8e764e82b5bf4bf8bffc7198e","https://github.com/ruby/rdoc/commit/d22ba930f1f611dda531dba04cd3d2531bb3f8a5","https://github.com/ruby/rdoc/commit/da7a0c7553ef7250ca665a3fecdc01dbaacbb43d","https://github.com/ruby/rdoc/commit/e4a0e71e6f1032f8b4e5e58b4ef60d702c22ce17","https://hackerone.com/reports/1187477","https://github.com/ruby/rdoc","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2024-27281.yml","https://lists.debian.org/debian-lts-announce/2024/09/msg00000.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27LUWREIFTP3MQAW7QE4PJM4DPAQJWXF","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XYDHPHEZI7OQXTQKTDZHGZNPIJH7ZV5N","https://www.ruby-lang.org/en/news/2024/03/21/rce-rdoc-cve-2024-27281"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"GHSA-592j-995h-p23j","url":"https://osv.dev/vulnerability/GHSA-592j-995h-p23j"}],"summary":"RDoc RCE vulnerability with .rdoc_options"}