{"action":"Upgrade bson to 1.12.3 or later.","affected":[{"fixed":"1.12.3","introduced":"0"},{"fixed":"3.0.4","introduced":"2.0"}],"component":"bson","cve_ids":["CVE-2015-4412"],"ecosystem":"RubyGems","epss":0.04663,"exploited":false,"fixed_versions":["1.12.3","3.0.4"],"ghsa_id":"GHSA-h6rj-8r3c-9gpj","id":"tcs_01M5KEKHHR4REPGTZT0G2H9NYK","modified_at":"2024-02-16T08:07:06.561735Z","published_at":"2018-03-05T19:43:21Z","references":["https://osv.dev/vulnerability/GHSA-h6rj-8r3c-9gpj","https://nvd.nist.gov/vuln/detail/CVE-2015-4412","https://github.com/mongodb/bson-ruby/commit/976da329ff03ecdfca3030eb6efe3c85e6db9999","https://bugzilla.redhat.com/show_bug.cgi?id=1229750","https://github.com/advisories/GHSA-h6rj-8r3c-9gpj","https://github.com/mongodb/bson-ruby","https://github.com/mongodb/bson-ruby/compare/7446d7c6764dfda8dc4480ce16d5c023e74be5ca...28f34978a85b689a4480b4d343389bf4886522e7","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bson/CVE-2015-4412.yml","https://sakurity.com/blog/2015/06/04/mongo_ruby_regexp.html","http://sakurity.com/blog/2015/06/04/mongo_ruby_regexp.html","http://www.openwall.com/lists/oss-security/2015/06/06/3","http://www.securityfocus.com/bid/75045"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h6rj-8r3c-9gpj","url":"https://osv.dev/vulnerability/GHSA-h6rj-8r3c-9gpj"}],"summary":"bson is vulnerable to denial of service due to incorrect regex validation"}