{"action":"Upgrade geokit-rails to 2.5.0 or later.","affected":[{"fixed":"2.5.0","introduced":"0"}],"component":"geokit-rails","cve_ids":["CVE-2023-26153"],"ecosystem":"RubyGems","epss":0.03847,"exploited":false,"fixed_versions":["2.5.0"],"ghsa_id":"GHSA-7xvc-v44j-46fh","id":"tcs_01M5KEHVBT8DYREV375NANDWTH","modified_at":"2024-02-16T08:13:57.347777Z","published_at":"2023-10-06T06:30:16Z","references":["https://osv.dev/vulnerability/GHSA-7xvc-v44j-46fh","https://nvd.nist.gov/vuln/detail/CVE-2023-26153","https://github.com/geokit/geokit-rails/commit/7ffc5813e57f6f417987043e1039925fd0865c43","https://github.com/geokit/geokit-rails/commit/a93dfe49fb9aeae7164e2f8c4041450a04b5482f","https://gist.github.com/CalumHutton/b7aa1c2e71c8d4386463ac14f686901d","https://github.com/advisories/GHSA-7xvc-v44j-46fh","https://github.com/geokit/geokit-rails","https://github.com/geokit/geokit-rails/blob/master/lib/geokit-rails/ip_geocode_lookup.rb#L37","https://github.com/geokit/geokit-rails/blob/master/lib/geokit-rails/ip_geocode_lookup.rb%23L37","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/geokit-rails/CVE-2023-26153.yml","https://security.snyk.io/vuln/SNYK-RUBY-GEOKITRAILS-5920323"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-7xvc-v44j-46fh","url":"https://osv.dev/vulnerability/GHSA-7xvc-v44j-46fh"}],"summary":"geokit-rails Command Injection vulnerability"}