{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.6.0"}],"component":"flash_tool","cve_ids":["CVE-2013-2513"],"ecosystem":"RubyGems","epss":0.01685,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6325-6g32-7p35","id":"tcs_01M5KEH6EPHDWY3C31A5NQRHZK","modified_at":"2024-02-16T07:57:40.140800Z","published_at":"2023-01-26T23:57:52Z","references":["https://osv.dev/vulnerability/GHSA-6325-6g32-7p35","https://nvd.nist.gov/vuln/detail/CVE-2013-2513","https://github.com/advisories/GHSA-6325-6g32-7p35","https://github.com/milboj/flash_tool","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/flash_tool/CVE-2013-2513.yml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6325-6g32-7p35","url":"https://osv.dev/vulnerability/GHSA-6325-6g32-7p35"}],"summary":"flash_tool Gem for Ruby File Download Handling Arbitrary Command Execution"}