{"action":"Upgrade marginalia to 1.6 or later.","affected":[{"fixed":"1.6","introduced":"0"}],"component":"marginalia","cve_ids":["CVE-2019-1010191"],"ecosystem":"RubyGems","epss":0.01381,"exploited":false,"fixed_versions":["1.6"],"ghsa_id":"GHSA-hrj5-qp7x-rpg6","id":"tcs_01M5KEKPAB4HSKP5HX69GC5ZYP","modified_at":"2024-02-16T08:19:08.502621Z","published_at":"2019-07-26T16:10:15Z","references":["https://osv.dev/vulnerability/GHSA-hrj5-qp7x-rpg6","https://nvd.nist.gov/vuln/detail/CVE-2019-1010191","https://github.com/basecamp/marginalia/pull/73","https://github.com/basecamp/marginalia","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/marginalia/CVE-2019-1010191.yml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hrj5-qp7x-rpg6","url":"https://osv.dev/vulnerability/GHSA-hrj5-qp7x-rpg6"}],"summary":"SQL Injection in marginalia"}