{"action":"Upgrade rack-cors to 2.0.2 or later.","affected":[{"fixed":"2.0.2","introduced":"2.0.1"}],"component":"rack-cors","cve_ids":["CVE-2024-27456"],"ecosystem":"RubyGems","epss":0.00771,"exploited":false,"fixed_versions":["2.0.2"],"ghsa_id":"GHSA-785g-282q-pwvx","id":"tcs_01M5KEHMDF7ETE5WEP0527RG5E","modified_at":"2024-03-04T18:51:48Z","published_at":"2024-02-26T18:30:31Z","references":["https://osv.dev/vulnerability/GHSA-785g-282q-pwvx","https://nvd.nist.gov/vuln/detail/CVE-2024-27456","https://github.com/cyu/rack-cors/issues/274","https://github.com/advisories/GHSA-785g-282q-pwvx","https://github.com/cyu/rack-cors","https://github.com/cyu/rack-cors/blob/878063987bd1ca956282dda95697fd821bf24d2e/CHANGELOG.md#changed","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack-cors/CVE-2024-27456.yml"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-785g-282q-pwvx","url":"https://osv.dev/vulnerability/GHSA-785g-282q-pwvx"}],"summary":"Rack CORS Middleware has Insecure File Permissions"}