{"action":"Upgrade rdoc to 6.1.2.1 or later.","affected":[{"fixed":"6.1.2.1","introduced":"3.11"},{"fixed":"6.2.1.1","introduced":"6.2.0"},{"fixed":"6.3.1","introduced":"6.3.0"}],"component":"rdoc","cve_ids":["CVE-2021-31799"],"ecosystem":"RubyGems","epss":0.0148,"exploited":false,"fixed_versions":["6.1.2.1","6.2.1.1","6.3.1"],"ghsa_id":"GHSA-ggxm-pgc9-g7fp","id":"tcs_01M5KEKAJEY7431B5DZB2DWAEJ","modified_at":"2024-11-14T01:15:50.703159Z","published_at":"2021-09-01T18:53:15Z","references":["https://osv.dev/vulnerability/GHSA-ggxm-pgc9-g7fp","https://nvd.nist.gov/vuln/detail/CVE-2021-31799","https://github.com/ruby/rdoc/commit/a7f5d6ab88632b3b482fe10611382ff73d14eed7","https://github.com/ruby/rdoc","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rdoc/CVE-2021-31799.yml","https://lists.debian.org/debian-lts-announce/2021/10/msg00009.html","https://security-tracker.debian.org/tracker/CVE-2021-31799","https://security.gentoo.org/glsa/202401-05","https://security.netapp.com/advisory/ntap-20210902-0004","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.ruby-lang.org/en/news/2021/05/02/os-command-injection-in-rdoc"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"GHSA-ggxm-pgc9-g7fp","url":"https://osv.dev/vulnerability/GHSA-ggxm-pgc9-g7fp"}],"summary":"Arbitrary Code Execution in Rdoc"}