{"action":"Upgrade dragonfly to 1.4.0 or later.","affected":[{"fixed":"1.4.0","introduced":"0"}],"component":"dragonfly","cve_ids":["CVE-2021-33473"],"ecosystem":"RubyGems","epss":0.01111,"exploited":false,"fixed_versions":["1.4.0"],"ghsa_id":"GHSA-fj34-jhjx-xmvv","id":"tcs_01M5KEK2W1V9HPXGC6SHBFCBZP","modified_at":"2024-02-21T05:37:56.850662Z","published_at":"2022-06-03T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-fj34-jhjx-xmvv","https://nvd.nist.gov/vuln/detail/CVE-2021-33473","https://github.com/markevans/dragonfly/issues/513","https://github.com/markevans/dragonfly/commit/25399297bb457f7fcf8e3f91e85945b255b111b5","https://github.com/markevans/dragonfly","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/dragonfly/CVE-2021-33473.yml","https://security.netapp.com/advisory/ntap-20220715-0004"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-fj34-jhjx-xmvv","url":"https://osv.dev/vulnerability/GHSA-fj34-jhjx-xmvv"}],"summary":"Arbitrary file write in dragonfly"}