{"action":"Upgrade ruby-mysql to 2.10.0 or later.","affected":[{"fixed":"2.10.0","introduced":"0"}],"component":"ruby-mysql","cve_ids":["CVE-2021-3779"],"ecosystem":"RubyGems","epss":0.01202,"exploited":false,"fixed_versions":["2.10.0"],"ghsa_id":"GHSA-73pr-g6jj-5hc9","id":"tcs_01M5KEHGBJE2HSEZQFZ56PZF35","modified_at":"2024-02-21T05:29:44.756734Z","published_at":"2022-06-29T00:00:27Z","references":["https://osv.dev/vulnerability/GHSA-73pr-g6jj-5hc9","https://nvd.nist.gov/vuln/detail/CVE-2021-3779","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-mysql/CVE-2021-3779.yml","https://www.rapid7.com/blog/post/2022/06/28/cve-2021-3779-ruby-mysql-gem-client-file-read-fixed","http://github.com/tmtm/ruby-mysql"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-73pr-g6jj-5hc9","url":"https://osv.dev/vulnerability/GHSA-73pr-g6jj-5hc9"}],"summary":"Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql"}