{"action":"Upgrade fluentd to 0.12.41 or later.","affected":[{"fixed":"0.12.41","introduced":"0.12.29"}],"component":"fluentd","cve_ids":["CVE-2017-10906"],"ecosystem":"RubyGems","epss":0.04581,"exploited":false,"fixed_versions":["0.12.41"],"ghsa_id":"GHSA-5jrp-w8fr-mrww","id":"tcs_01M5KEH1XHWGPRV8HNBZCYZG1Z","modified_at":"2024-12-05T05:43:47.458610Z","published_at":"2022-05-13T01:07:35Z","references":["https://osv.dev/vulnerability/GHSA-5jrp-w8fr-mrww","https://nvd.nist.gov/vuln/detail/CVE-2017-10906","https://github.com/fluent/fluentd/pull/1733","https://access.redhat.com/errata/RHSA-2018:2225","https://github.com/fluent/fluentd","https://github.com/fluent/fluentd/blob/v0.12/CHANGELOG.md#bug-fixes","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/fluentd/CVE-2017-10906.yml","https://jvn.jp/en/vu/JVNVU95124098/index.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-5jrp-w8fr-mrww","url":"https://osv.dev/vulnerability/GHSA-5jrp-w8fr-mrww"}],"summary":"Fluentd Escape Sequence Injection Vulnerability"}