{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.3"}],"component":"pdf_info","cve_ids":["CVE-2022-36231"],"ecosystem":"RubyGems","epss":0.03014,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9fh3-j99m-f4v7","id":"tcs_01M5KEJAY9N1WQ5QA0HZSWNM6F","modified_at":"2025-03-13T22:22:35.249523Z","published_at":"2023-02-24T00:30:17Z","references":["https://osv.dev/vulnerability/GHSA-9fh3-j99m-f4v7","https://nvd.nist.gov/vuln/detail/CVE-2022-36231","https://github.com/newspaperclub/pdf_info/issues/16","https://github.com/newspaperclub/pdf_info/pull/15","https://github.com/affix/CVE-2022-36231","https://github.com/newspaperclub/pdf_info","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pdf_info/CVE-2022-36231.yml","https://rubygems.org/gems/pdf_info"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-9fh3-j99m-f4v7","url":"https://osv.dev/vulnerability/GHSA-9fh3-j99m-f4v7"}],"summary":"Code injection in pdf_info"}