{"action":"Upgrade kredis to 1.3.0.1 or later.","affected":[{"fixed":"1.3.0.1","introduced":"0"}],"component":"kredis","cve_ids":["CVE-2023-27531"],"ecosystem":"RubyGems","epss":0.00542,"exploited":false,"fixed_versions":["1.3.0.1"],"ghsa_id":"GHSA-h2wm-p2vg-6pw4","id":"tcs_01M5KEKFTA667SJRM92PKDZQ8Q","modified_at":"2025-01-10T18:47:40.903534Z","published_at":"2023-06-09T22:40:54Z","references":["https://osv.dev/vulnerability/GHSA-h2wm-p2vg-6pw4","https://nvd.nist.gov/vuln/detail/CVE-2023-27531","https://github.com/rails/kredis/commit/d576b7ae5c8d3d74eeb4bd84cad0aa64ffc299fa","https://discuss.rubyonrails.org/t/cve-2023-27531-possible-deserialization-of-untrusted-data-vulnerability-in-kredis-json/82467","https://discuss.rubyonrails.org/t/cve-2023-27531-possible-deserialization-of-untrusted-data-vulnerability-in-kredis-json/82467#post_1","https://github.com/rails/kredis","https://github.com/rails/kredis/releases/tag/v1.3.0.1","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/kredis/CVE-2023-27531.yml"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h2wm-p2vg-6pw4","url":"https://osv.dev/vulnerability/GHSA-h2wm-p2vg-6pw4"}],"summary":"Kredis JSON Possible Deserialization of Untrusted Data Vulnerability"}