{"action":"Upgrade webrick to 1.8.2 or later.","affected":[{"fixed":"1.8.2","introduced":"0"}],"component":"webrick","cve_ids":["CVE-2024-47220"],"ecosystem":"RubyGems","exploited":false,"fixed_versions":["1.8.2"],"ghsa_id":"GHSA-6f62-3596-g6w7","id":"tcs_01M5KEHAHKSENHHD1CVTSXZ6C2","modified_at":"2026-09-10T03:50:18.821555207Z","published_at":"2024-09-22T03:30:30Z","references":["https://osv.dev/vulnerability/GHSA-6f62-3596-g6w7","https://nvd.nist.gov/vuln/detail/CVE-2024-47220","https://github.com/ruby/webrick/issues/145","https://github.com/ruby/webrick/issues/145#issuecomment-2369994610","https://github.com/ruby/webrick/issues/145#issuecomment-2372838285","https://github.com/ruby/webrick/pull/146/commits/d88321da45dcd230ac2b4585cad4833d6d5e8841","https://github.com/ruby/webrick/commit/f5faca9222541591e1a7c3c97552ebb0c92733c7","https://github.com/ruby/webrick","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2024-47220.yml"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6f62-3596-g6w7","url":"https://osv.dev/vulnerability/GHSA-6f62-3596-g6w7"}],"summary":"HTTP Request Smuggling in ruby webrick"}