{"action":"Upgrade resque to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"0"}],"component":"resque","cve_ids":["CVE-2023-50725"],"ecosystem":"RubyGems","epss":0.00526,"exploited":false,"fixed_versions":["2.2.1"],"ghsa_id":"GHSA-gc3j-vvwf-4rp8","id":"tcs_01M5KEK9VQR1443HRWK3112DY1","modified_at":"2024-02-16T08:16:11.344395Z","published_at":"2023-12-18T19:34:06Z","references":["https://osv.dev/vulnerability/GHSA-gc3j-vvwf-4rp8","https://github.com/resque/resque/security/advisories/GHSA-gc3j-vvwf-4rp8","https://nvd.nist.gov/vuln/detail/CVE-2023-50725","https://github.com/resque/resque/pull/1790","https://github.com/resque/resque/commit/ee99d2ed6cc75d9d384483b70c2d96d312115f07","https://github.com/resque/resque","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/resque/CVE-2023-50725.yml"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-gc3j-vvwf-4rp8","url":"https://osv.dev/vulnerability/GHSA-gc3j-vvwf-4rp8"}],"summary":"Resque vulnerable to reflected XSS in resque-web failed and queues lists"}