{"action":"Upgrade gon to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0"}],"component":"gon","cve_ids":["CVE-2020-25739"],"ecosystem":"RubyGems","epss":0.01376,"exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-78vq-9j56-wrfr","id":"tcs_01M5KEHMWE9TGH62X4KBNJMGEP","modified_at":"2024-02-19T05:28:55.784562Z","published_at":"2021-04-30T17:29:15Z","references":["https://osv.dev/vulnerability/GHSA-78vq-9j56-wrfr","https://nvd.nist.gov/vuln/detail/CVE-2020-25739","https://github.com/gazay/gon/commit/fe3c7b2191a992386dc9edd37de5447a4e809bc7","https://github.com/gazay/gon","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gon/CVE-2020-25739.yml","https://lists.debian.org/debian-lts-announce/2020/09/msg00018.html","https://usn.ubuntu.com/4560-1"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-78vq-9j56-wrfr","url":"https://osv.dev/vulnerability/GHSA-78vq-9j56-wrfr"}],"summary":"Gon gem lack of escaping certain input when outputting as JSON"}