{"action":"Upgrade rdiscount to 2.2.7.4 or later.","affected":[{"fixed":"2.2.7.4","introduced":"1.3.1.1"}],"component":"rdiscount","cve_ids":["CVE-2026-35201"],"ecosystem":"RubyGems","epss":0.00285,"exploited":false,"fixed_versions":["2.2.7.4"],"ghsa_id":"GHSA-6r34-94wq-jhrc","id":"tcs_01M5KEHD7A7ZV3YJ836WAN2JGR","modified_at":"2026-05-13T16:35:44.190293Z","published_at":"2026-04-06T17:53:59Z","references":["https://osv.dev/vulnerability/GHSA-6r34-94wq-jhrc","https://github.com/davidfstr/rdiscount/security/advisories/GHSA-6r34-94wq-jhrc","https://nvd.nist.gov/vuln/detail/CVE-2026-35201","https://github.com/davidfstr/rdiscount/commit/b1a16445e92e0d12c07594dedcdc56f80b317761","https://github.com/davidfstr/rdiscount","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdiscount/CVE-2026-35201.yml","http://github.com/davidfstr/rdiscount/releases/tag/2.2.7.4"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-6r34-94wq-jhrc","url":"https://osv.dev/vulnerability/GHSA-6r34-94wq-jhrc"}],"summary":"rdiscount has an Out-of-bounds Read"}