{"action":"Upgrade rake to 12.3.3 or later.","affected":[{"fixed":"12.3.3","introduced":"0"}],"component":"rake","cve_ids":["CVE-2020-8130"],"ecosystem":"RubyGems","epss":0.01359,"exploited":false,"fixed_versions":["12.3.3"],"ghsa_id":"GHSA-jppv-gw3r-w3q8","id":"tcs_01M5KEM0RADCP3A21QAK5AM6QW","modified_at":"2024-02-19T05:32:17.994147Z","published_at":"2020-02-28T16:54:36Z","references":["https://osv.dev/vulnerability/GHSA-jppv-gw3r-w3q8","https://nvd.nist.gov/vuln/detail/CVE-2020-8130","https://github.com/ruby/rake/commit/5b8f8fc41a5d7d7d6a5d767e48464c60884d3aee","https://hackerone.com/reports/651518","https://github.com/advisories/GHSA-jppv-gw3r-w3q8","https://github.com/ruby/rake","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rake/CVE-2020-8130.yml","https://lists.debian.org/debian-lts-announce/2020/02/msg00026.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/523CLQ62VRN3VVC52KMPTROCCKY4Z36B","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXMX4ARNX2JLRJMSH4N3J3UBMUT5CI44","https://usn.ubuntu.com/4295-1","http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-jppv-gw3r-w3q8","url":"https://osv.dev/vulnerability/GHSA-jppv-gw3r-w3q8"}],"summary":"OS Command Injection in Rake"}