{"action":"Upgrade passenger to 4.0.38 or later.","affected":[{"fixed":"4.0.38","introduced":"0"}],"component":"passenger","cve_ids":["CVE-2014-1831"],"ecosystem":"RubyGems","epss":0.00371,"exploited":false,"fixed_versions":["4.0.38"],"ghsa_id":"GHSA-c7j7-p5jq-26ff","id":"tcs_01M5KEJNG7CPXH4726Q8HHY2JS","modified_at":"2024-12-08T05:43:54.866033Z","published_at":"2018-10-10T17:29:20Z","references":["https://osv.dev/vulnerability/GHSA-c7j7-p5jq-26ff","https://nvd.nist.gov/vuln/detail/CVE-2014-1831","https://github.com/phusion/passenger/commit/34b1087870c2","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736958","https://bugzilla.redhat.com/show_bug.cgi?id=1058992","https://github.com/advisories/GHSA-c7j7-p5jq-26ff","https://github.com/phusion/passenger","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/passenger/CVE-2014-1831.yml","http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149032.html","http://openwall.com/lists/oss-security/2014/01/28/8","http://openwall.com/lists/oss-security/2014/01/30/3"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-c7j7-p5jq-26ff","url":"https://osv.dev/vulnerability/GHSA-c7j7-p5jq-26ff"}],"summary":"Insecure use of temporary files in passenger"}