{"action":"Upgrade mysql-binuuid-rails to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"mysql-binuuid-rails","cve_ids":["CVE-2018-18476"],"ecosystem":"RubyGems","epss":0.01789,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-6j63-35hj-vmcg","id":"tcs_01M5KEHC97DMMBGNCRMJ0K3HKY","modified_at":"2024-02-16T07:57:35.304128Z","published_at":"2018-10-30T20:34:06Z","references":["https://osv.dev/vulnerability/GHSA-6j63-35hj-vmcg","https://nvd.nist.gov/vuln/detail/CVE-2018-18476","https://github.com/nedap/mysql-binuuid-rails/pull/18","https://github.com/nedap/mysql-binuuid-rails/commit/9ae920951b46ff0163b16c55d744e89acb1036d4","https://gist.github.com/viraptor/881276ea61e8d56bac6e28454c79f1e6","https://github.com/nedap/mysql-binuuid-rails","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/mysql-binuuid-rails/CVE-2018-18476.yml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6j63-35hj-vmcg","url":"https://osv.dev/vulnerability/GHSA-6j63-35hj-vmcg"}],"summary":"mysql-bunuuid-rails vulnerable to SQL injection"}