{"action":"Upgrade ruby-openid to 2.2.2 or later.","affected":[{"fixed":"2.2.2","introduced":"0"}],"component":"ruby-openid","cve_ids":["CVE-2013-1812"],"ecosystem":"RubyGems","epss":0.02132,"exploited":false,"fixed_versions":["2.2.2"],"ghsa_id":"GHSA-6c8p-qphv-668v","id":"tcs_01M5KEHACNXFXRRAWR1YTCBQ9M","modified_at":"2024-12-05T05:43:55.233706Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-6c8p-qphv-668v","https://nvd.nist.gov/vuln/detail/CVE-2013-1812","https://github.com/openid/ruby-openid/pull/43","https://github.com/openid/ruby-openid/commit/a3693cef06049563f5b4e4824f4d3211288508ed","https://bugzilla.redhat.com/show_bug.cgi?id=918134","https://github.com/advisories/GHSA-6c8p-qphv-668v","https://github.com/openid/ruby-openid","https://github.com/openid/ruby-openid/blob/master/CHANGELOG.md","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-openid/CVE-2013-1812.yml","http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120204.html","http://lists.fedoraproject.org/pipermail/package-announce/2013-November/120361.html","http://www.openwall.com/lists/oss-security/2013/03/03/8"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-6c8p-qphv-668v","url":"https://osv.dev/vulnerability/GHSA-6c8p-qphv-668v"}],"summary":"Denial of service in ruby-openid"}