{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.2.0"}],"component":"xaviershay-dm-rails","cve_ids":["CVE-2015-2179"],"ecosystem":"RubyGems","epss":0.00369,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-88p8-4vv5-82j7","id":"tcs_01M5KEHZ2JTZ9YDA9043APK2WP","modified_at":"2023-12-14T22:26:52Z","published_at":"2023-01-26T23:51:40Z","references":["https://osv.dev/vulnerability/GHSA-88p8-4vv5-82j7","https://nvd.nist.gov/vuln/detail/CVE-2015-2179","https://github.com/datamapper/dm-rails","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/xaviershay-dm-rails/CVE-2015-2179.yml","http://www.vapid.dhs.org/advisory.php?v=115"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-88p8-4vv5-82j7","url":"https://osv.dev/vulnerability/GHSA-88p8-4vv5-82j7"}],"summary":"xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table"}