{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.0"}],"component":"open-uri-cached","cve_ids":["CVE-2015-3649"],"ecosystem":"RubyGems","epss":0.00388,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7m2w-9gw7-c3xp","id":"tcs_01M5KEHR4T040D61GJM2HZ51QM","modified_at":"2024-02-20T05:32:37.867211Z","published_at":"2022-05-13T01:13:48Z","references":["https://osv.dev/vulnerability/GHSA-7m2w-9gw7-c3xp","https://nvd.nist.gov/vuln/detail/CVE-2015-3649","https://github.com/tigris/open-uri-cached/issues/8","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/open-uri-cached/CVE-2015-3649.yml","https://github.com/tigris/open-uri-cached","https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb","https://web.archive.org/web/20210119122105/http://www.securityfocus.com/bid/74469","http://seclists.org/oss-sec/2015/q2/373","http://www.benjaminfleischer.com/2013/03/20/yaml-and-security-in-ruby","http://www.openwall.com/lists/oss-security/2015/05/06/2"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-7m2w-9gw7-c3xp","url":"https://osv.dev/vulnerability/GHSA-7m2w-9gw7-c3xp"}],"summary":"open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution"}