{"action":"Upgrade curupira to 0.1.4 or later.","affected":[{"fixed":"0.1.4","introduced":"0"}],"component":"curupira","cve_ids":["CVE-2015-10053"],"ecosystem":"RubyGems","epss":0.00779,"exploited":false,"fixed_versions":["0.1.4"],"ghsa_id":"GHSA-85gf-wr67-f83w","id":"tcs_01M5KEHVZ9DGZVQFNVT50V6XJG","modified_at":"2023-11-08T03:57:49.273430Z","published_at":"2023-01-16T12:30:17Z","references":["https://osv.dev/vulnerability/GHSA-85gf-wr67-f83w","https://nvd.nist.gov/vuln/detail/CVE-2015-10053","https://github.com/prodigasistemas/curupira/commit/93a9a77896bb66c949acb8e64bceafc74bc8c271","https://github.com/prodigasistemas/curupira","https://github.com/prodigasistemas/curupira/releases/tag/v0.1.4","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/curupira/CVE-2015-10053.yml","https://vuldb.com/?ctiid.218394","https://vuldb.com/?id.218394"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-85gf-wr67-f83w","url":"https://osv.dev/vulnerability/GHSA-85gf-wr67-f83w"}],"summary":"curupira is vulnerable to SQL injection"}