{"action":"Upgrade sidekiq-unique-jobs to 7.1.33 or later.","affected":[{"fixed":"8.0.7","introduced":"8.0.0"},{"fixed":"7.1.33","introduced":"6.0.0.rc7"}],"component":"sidekiq-unique-jobs","cve_ids":["CVE-2023-46950","CVE-2023-46951","CVE-2024-25122"],"ecosystem":"RubyGems","epss":0.00595,"exploited":false,"fixed_versions":["8.0.7","7.1.33"],"ghsa_id":"GHSA-cmh9-rx85-xj38","id":"tcs_01M5KEJT64ZF5983X62J8ZEBGD","modified_at":"2026-07-08T06:49:47.056102588Z","published_at":"2024-02-13T18:34:16Z","references":["https://osv.dev/vulnerability/GHSA-cmh9-rx85-xj38","https://github.com/mhenrixon/sidekiq-unique-jobs/security/advisories/GHSA-cmh9-rx85-xj38","https://nvd.nist.gov/vuln/detail/CVE-2024-25122","https://github.com/mhenrixon/sidekiq-unique-jobs/commit/cd09ba6108f98973b6649a6149790c3d4502b4cc","https://github.com/mhenrixon/sidekiq-unique-jobs/commit/ec3afd920c1b55843c72f748a87baac7f8be82ed","https://github.com/mhenrixon/sidekiq-unique-jobs","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sidekiq-unique-jobs/CVE-2024-25122.yml"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-cmh9-rx85-xj38","url":"https://osv.dev/vulnerability/GHSA-cmh9-rx85-xj38"}],"summary":"XSS sidekiq-unique-jobs UI server vulnerability"}