{"action":"Upgrade gyazo to 2.0.0 or later.","affected":[{"fixed":"2.0.0","introduced":"1.0.0"}],"component":"gyazo","cve_ids":["CVE-2014-4994"],"ecosystem":"RubyGems","epss":0.00477,"exploited":false,"fixed_versions":["2.0.0"],"ghsa_id":"GHSA-6x45-86q6-rcmr","id":"tcs_01M5KEHEFPR723T4W8BKW743HD","modified_at":"2023-11-08T03:57:42.589808Z","published_at":"2018-01-22T23:17:39Z","references":["https://osv.dev/vulnerability/GHSA-6x45-86q6-rcmr","https://nvd.nist.gov/vuln/detail/CVE-2014-4994","https://github.com/gyazo/gyazo-ruby","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gyazo/CVE-2014-4994.yml","https://web.archive.org/web/20200229061943/http://www.vapid.dhs.org/advisories/gyazo-1.0.0.html","http://www.openwall.com/lists/oss-security/2014/07/07/13","http://www.openwall.com/lists/oss-security/2014/07/17/5"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-6x45-86q6-rcmr","url":"https://osv.dev/vulnerability/GHSA-6x45-86q6-rcmr"}],"summary":"Gyazo allows local users to write arbitrary files"}