{"action":"Upgrade git to 1.11.0 or later.","affected":[{"fixed":"1.11.0","introduced":"0"}],"component":"git","cve_ids":["CVE-2022-25648"],"ecosystem":"RubyGems","epss":0.04593,"exploited":false,"fixed_versions":["1.11.0"],"ghsa_id":"GHSA-69p6-wvmq-27gg","id":"tcs_01M5KEH9BRZWMDX377JQ6FQGHB","modified_at":"2026-07-08T06:50:03.497695493Z","published_at":"2022-04-20T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-69p6-wvmq-27gg","https://nvd.nist.gov/vuln/detail/CVE-2022-25648","https://github.com/ruby-git/ruby-git/pull/569","https://github.com/ruby-git/ruby-git/commit/291ca0946bec7164b90ad5c572ac147f512c7159","https://github.com/ruby-git/ruby-git","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/git/CVE-2022-25648.yml","https://lists.debian.org/debian-lts-announce/2023/01/msg00043.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTJUF6SFPL4ZVSJQHGQ36KFPFO5DQVYZ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Q2V3HOFU4ZVTQZHAVAVL3EX2KU53SP7R","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWNJA7WPE67LJ3DJMWZ2TADHCZKWMY55","https://snyk.io/vuln/SNYK-RUBY-GIT-2421270"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-69p6-wvmq-27gg","url":"https://osv.dev/vulnerability/GHSA-69p6-wvmq-27gg"}],"summary":"Command injection in ruby-git"}