{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.4"}],"component":"openshift-origin-controller","cve_ids":["CVE-2013-2095"],"ecosystem":"RubyGems","epss":0.02498,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-77xq-7c6p-6xp6","id":"tcs_01M5KEHM8QR35ZZ01YGZK5TY0M","modified_at":"2024-02-16T08:06:58.193963Z","published_at":"2022-05-05T00:29:09Z","references":["https://osv.dev/vulnerability/GHSA-77xq-7c6p-6xp6","https://nvd.nist.gov/vuln/detail/CVE-2013-2095","https://access.redhat.com/security/cve/cve-2013-2095","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2095","https://github.com/openshift/origin-server","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/openshift-origin-controller/CVE-2013-2095.yml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-77xq-7c6p-6xp6","url":"https://osv.dev/vulnerability/GHSA-77xq-7c6p-6xp6"}],"summary":"RubyGem openshift-origin-controller is vulnerable to command injection"}