{"action":"Upgrade diffy to 3.4.1 or later.","affected":[{"fixed":"3.4.1","introduced":"0"}],"component":"diffy","cve_ids":["CVE-2022-33127"],"ecosystem":"RubyGems","epss":0.01837,"exploited":false,"fixed_versions":["3.4.1"],"ghsa_id":"GHSA-5ww9-9qp2-x524","id":"tcs_01M5KEH54506S9V41V84YHJR3J","modified_at":"2024-12-08T05:29:46.954310Z","published_at":"2022-06-24T00:00:31Z","references":["https://osv.dev/vulnerability/GHSA-5ww9-9qp2-x524","https://nvd.nist.gov/vuln/detail/CVE-2022-33127","https://github.com/samg/diffy/commit/478f392082b66d38f54a02b4bb9c41be32fd6593","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/diffy/CVE-2022-33127.yml","https://github.com/samg/diffy","https://github.com/samg/diffy/blob/56fd935aea256742f7352b050592542d3d153bf6/CHANGELOG#L1"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-5ww9-9qp2-x524","url":"https://osv.dev/vulnerability/GHSA-5ww9-9qp2-x524"}],"summary":"Improper handling of double quotes in file name in Diffy in Windows environment"}