{"action":"Upgrade ruby_parser to 3.1.2 or later.","affected":[{"fixed":"3.1.2","introduced":"2.0.2"}],"component":"ruby_parser","cve_ids":["CVE-2013-0162"],"ecosystem":"RubyGems","epss":0.00371,"exploited":false,"fixed_versions":["3.1.2"],"ghsa_id":"GHSA-8mvw-22r7-w6fq","id":"tcs_01M5KEJ38RFYDNVGT270PBCKX5","modified_at":"2024-11-29T05:40:03.993107Z","published_at":"2022-05-05T02:48:30Z","references":["https://osv.dev/vulnerability/GHSA-8mvw-22r7-w6fq","https://nvd.nist.gov/vuln/detail/CVE-2013-0162","https://github.com/seattlerb/ruby_parser/commit/506c7e13cff6f8715385fa8488b621028b4ad280","https://github.com/seattlerb/ruby_parser/commit/c35acd878d50a8e4ea35933e3fbdc493421d422c","https://access.redhat.com/errata/RHSA-2013:0544","https://access.redhat.com/errata/RHSA-2013:0582","https://access.redhat.com/security/cve/CVE-2013-0162","https://bugzilla.redhat.com/show_bug.cgi?id=892806","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby_parser/CVE-2013-0162.yml","https://github.com/seattlerb/ruby_parser","http://rhn.redhat.com/errata/RHSA-2013-0544.html","http://rhn.redhat.com/errata/RHSA-2013-0548.html"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-8mvw-22r7-w6fq","url":"https://osv.dev/vulnerability/GHSA-8mvw-22r7-w6fq"}],"summary":"ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name"}