{"action":"Upgrade sinatra to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"2.0.0.beta1"}],"component":"sinatra","cve_ids":["CVE-2018-7212"],"ecosystem":"RubyGems","epss":0.01838,"exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-h29f-7f56-j8wh","id":"tcs_01M5KEKFGP7WQ696TR1PH9MNFG","modified_at":"2023-11-08T04:00:22.311872Z","published_at":"2018-02-20T19:23:20Z","references":["https://osv.dev/vulnerability/GHSA-h29f-7f56-j8wh","https://nvd.nist.gov/vuln/detail/CVE-2018-7212","https://github.com/sinatra/sinatra/pull/1379","https://github.com/sinatra/sinatra/commit/6ad721abcfe36334108dcdd05d046c361e1b7a9c","https://github.com/sinatra/sinatra"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h29f-7f56-j8wh","url":"https://osv.dev/vulnerability/GHSA-h29f-7f56-j8wh"}],"summary":"Sinatra Path Traversal vulnerability"}