{"action":"Upgrade yajl-ruby to 1.4.3 or later.","affected":[{"fixed":"1.4.3","introduced":"0"}],"component":"yajl-ruby","cve_ids":["CVE-2022-24795"],"ecosystem":"RubyGems","epss":0.03472,"exploited":false,"fixed_versions":["1.4.3"],"ghsa_id":"GHSA-jj47-x69x-mxrm","id":"tcs_01M5KEKXACPE6MS8YBZQSXRT4R","modified_at":"2024-02-16T08:22:00.241668Z","published_at":"2022-04-05T15:55:51Z","references":["https://osv.dev/vulnerability/GHSA-jj47-x69x-mxrm","https://github.com/brianmario/yajl-ruby/security/advisories/GHSA-jj47-x69x-mxrm","https://nvd.nist.gov/vuln/detail/CVE-2022-24795","https://github.com/brianmario/yajl-ruby/commit/7168bd79b888900aa94523301126f968a93eb3a6","https://github.com/brianmario/yajl-ruby","https://github.com/brianmario/yajl-ruby/blob/7168bd79b888900aa94523301126f968a93eb3a6/ext/yajl/yajl_buf.c#L64","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yajl-ruby/CVE-2022-24795.yml","https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html","https://lists.debian.org/debian-lts-announce/2023/08/msg00003.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KLE3C4CECEJ4EUYI56KXI6OWACWXX7WN","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YO32YDJ74DADC7CMJNLSLBVWN5EXGF5J"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-jj47-x69x-mxrm","url":"https://osv.dev/vulnerability/GHSA-jj47-x69x-mxrm"}],"summary":"Buffer Overflow in yajl-ruby"}