{"action":"Upgrade sidekiq to 5.2.10 or later.","affected":[{"fixed":"6.4.0","introduced":"6.0.0"},{"fixed":"5.2.10","introduced":"0"}],"component":"sidekiq","cve_ids":["CVE-2022-23837"],"ecosystem":"RubyGems","epss":0.05215,"exploited":false,"fixed_versions":["6.4.0","5.2.10"],"ghsa_id":"GHSA-jrfj-98qg-qjgv","id":"tcs_01M5KEM0XGG3ZAKH3E2PNRK7XV","modified_at":"2023-11-08T04:08:27.525166Z","published_at":"2022-01-27T14:42:37Z","references":["https://osv.dev/vulnerability/GHSA-jrfj-98qg-qjgv","https://nvd.nist.gov/vuln/detail/CVE-2022-23837","https://github.com/rubysec/ruby-advisory-db/pull/495","https://github.com/mperham/sidekiq/commit/7785ac1399f1b28992adb56055f6acd88fd1d956","https://github.com/TUTUMSPACE/exploits/blob/main/sidekiq.md","https://github.com/mperham/sidekiq","https://lists.debian.org/debian-lts-announce/2022/03/msg00015.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jrfj-98qg-qjgv","url":"https://osv.dev/vulnerability/GHSA-jrfj-98qg-qjgv"}],"summary":"Denial of service in sidekiq"}