{"action":"Upgrade doorkeeper to 4.4.0 or later.","affected":[{"fixed":"4.4.0","introduced":"4.2.0"}],"component":"doorkeeper","cve_ids":["CVE-2018-1000211"],"ecosystem":"RubyGems","epss":0.01553,"exploited":false,"fixed_versions":["4.4.0"],"ghsa_id":"GHSA-694m-jhr9-pf77","id":"tcs_01M5KEH8WJ1B5QQ3BBK0KN49K2","modified_at":"2023-11-08T03:59:37.663503Z","published_at":"2018-08-13T20:46:41Z","references":["https://osv.dev/vulnerability/GHSA-694m-jhr9-pf77","https://nvd.nist.gov/vuln/detail/CVE-2018-1000211","https://github.com/doorkeeper-gem/doorkeeper/issues/891","https://github.com/doorkeeper-gem/doorkeeper/pull/1119","https://github.com/advisories/GHSA-694m-jhr9-pf77","https://github.com/doorkeeper-gem/doorkeeper"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-694m-jhr9-pf77","url":"https://osv.dev/vulnerability/GHSA-694m-jhr9-pf77"}],"summary":"Doorkeeper subject to Incorrect Permission Assignment"}