{"action":"Upgrade grape to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"grape","cve_ids":["CVE-2018-3769"],"ecosystem":"RubyGems","epss":0.01428,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-f599-5m7p-hcpf","id":"tcs_01M5KEJYBKTCZWG7ZBHX9KKYQH","modified_at":"2023-11-08T04:00:19.511224Z","published_at":"2018-08-13T20:45:32Z","references":["https://osv.dev/vulnerability/GHSA-f599-5m7p-hcpf","https://nvd.nist.gov/vuln/detail/CVE-2018-3769","https://github.com/ruby-grape/grape/issues/1762","https://github.com/ruby-grape/grape/pull/1763","https://github.com/ruby-grape/grape/commit/6876b71efc7b03f7ce1be3f075eaa4e7e6de19af","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/grape/CVE-2018-3769.yml"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-f599-5m7p-hcpf","url":"https://osv.dev/vulnerability/GHSA-f599-5m7p-hcpf"}],"summary":"grape subject to Cross-site Scripting"}