{"action":"Upgrade private_address_check to 0.4.0 or later.","affected":[{"fixed":"0.4.0","introduced":"0"}],"component":"private_address_check","cve_ids":["CVE-2017-0904"],"ecosystem":"RubyGems","epss":0.02415,"exploited":false,"fixed_versions":["0.4.0"],"ghsa_id":"GHSA-hxhj-hp9m-qwc4","id":"tcs_01M5KEKQNAJ507TZ2ZHAJNX55E","modified_at":"2024-11-30T05:29:47.397724Z","published_at":"2017-11-29T23:21:05Z","references":["https://osv.dev/vulnerability/GHSA-hxhj-hp9m-qwc4","https://nvd.nist.gov/vuln/detail/CVE-2017-0904","https://github.com/jtdowney/private_address_check/issues/1","https://github.com/jtdowney/private_address_check/commit/58a0d7fe31de339c0117160567a5b33ad82b46af","https://hackerone.com/reports/287245","https://hackerone.com/reports/287835","https://edoverflow.com/2017/ruby-resolv-bug"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-hxhj-hp9m-qwc4","url":"https://osv.dev/vulnerability/GHSA-hxhj-hp9m-qwc4"},{"source":"nvd","source_id":"CVE-2017-0904","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-0904"}],"summary":"private_address_check vulnerable to bypass of Resolv.getaddresses method"}