{"action":"Upgrade sinatra to 4.1.0 or later.","affected":[{"fixed":"4.1.0","introduced":"0"}],"component":"sinatra","cve_ids":["CVE-2024-21510"],"ecosystem":"RubyGems","epss":0.00494,"exploited":false,"fixed_versions":["4.1.0"],"ghsa_id":"GHSA-hxx2-7vcw-mqr3","id":"tcs_01M5KEKR3VDQAHSDR15JGRA6ME","modified_at":"2026-09-10T03:50:20.789353543Z","published_at":"2024-11-01T06:30:34Z","references":["https://osv.dev/vulnerability/GHSA-hxx2-7vcw-mqr3","https://nvd.nist.gov/vuln/detail/CVE-2024-21510","https://github.com/sinatra/sinatra/pull/2010","https://github.com/advisories/GHSA-hxx2-7vcw-mqr3","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sinatra/CVE-2024-21510.yml","https://github.com/sinatra/sinatra","https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L319","https://github.com/sinatra/sinatra/blob/b626e2d82c23b4fde0b51782fd32ca27ccde1d1a/lib/sinatra/base.rb#L323C1-L343C17","https://github.com/sinatra/sinatra/blob/main/CHANGELOG.md#410--2024-11-18","https://security.snyk.io/vuln/SNYK-RUBY-SINATRA-6483832"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-hxx2-7vcw-mqr3","url":"https://osv.dev/vulnerability/GHSA-hxx2-7vcw-mqr3"}],"summary":"Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision"}