{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.1.6"}],"component":"kcapifony","cve_ids":["CVE-2014-5001"],"ecosystem":"RubyGems","epss":0.00522,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6fcq-3cm2-j3j5","id":"tcs_01M5KEHAPE3EHDA6YQE4R13WVG","modified_at":"2024-02-16T08:08:18.908198Z","published_at":"2018-07-23T19:50:11Z","references":["https://osv.dev/vulnerability/GHSA-6fcq-3cm2-j3j5","https://nvd.nist.gov/vuln/detail/CVE-2014-5001","https://github.com/Kunstmaan/kCapifony","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kcapifony/CVE-2014-5001.yml","http://www.openwall.com/lists/oss-security/2014/07/07/21","http://www.openwall.com/lists/oss-security/2014/07/17/5","http://www.vapid.dhs.org/advisories/kcapifony-2.1.6.html"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-6fcq-3cm2-j3j5","url":"https://osv.dev/vulnerability/GHSA-6fcq-3cm2-j3j5"}],"summary":"Kcapifony gem for Ruby places database user passwords on the command line"}