{"action":"Upgrade view_component to 2.31.2 or later.","affected":[{"fixed":"2.31.2","introduced":"2.31.0"},{"fixed":"2.49.1","introduced":"2.32.0"}],"component":"view_component","cve_ids":["CVE-2022-24722"],"ecosystem":"RubyGems","epss":0.01092,"exploited":false,"fixed_versions":["2.31.2","2.49.1"],"ghsa_id":"GHSA-cm9w-c4rj-r2cf","id":"tcs_01M5KEJSQC18GGJ77X9CX1RJ26","modified_at":"2024-02-16T07:51:13.975898Z","published_at":"2022-03-02T22:24:05Z","references":["https://osv.dev/vulnerability/GHSA-cm9w-c4rj-r2cf","https://github.com/github/view_component/security/advisories/GHSA-cm9w-c4rj-r2cf","https://nvd.nist.gov/vuln/detail/CVE-2022-24722","https://github.com/github/view_component/commit/3f82a6e62578ff6f361aba24a1feb2caccf83ff9","https://github.com/github/view_component","https://github.com/github/view_component/releases/tag/v2.31.2","https://github.com/github/view_component/releases/tag/v2.49.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/view_component/CVE-2022-24722.yml"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-cm9w-c4rj-r2cf","url":"https://osv.dev/vulnerability/GHSA-cm9w-c4rj-r2cf"}],"summary":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in view_component"}