{"action":"Upgrade papercrop to 0.3.0 or later.","affected":[{"fixed":"0.3.0","introduced":"0"}],"component":"papercrop","cve_ids":["CVE-2015-2784"],"ecosystem":"RubyGems","epss":0.0178,"exploited":false,"fixed_versions":["0.3.0"],"ghsa_id":"GHSA-m44r-gv6q-9j9r","id":"tcs_01M5KEM42JKFGCYDCBDBNXN7SD","modified_at":"2023-11-08T03:57:52.294489Z","published_at":"2022-05-24T17:06:56Z","references":["https://osv.dev/vulnerability/GHSA-m44r-gv6q-9j9r","https://nvd.nist.gov/vuln/detail/CVE-2015-2784","https://github.com/rsantamaria/papercrop/commit/b4ecd95debaf0a8712bd1d34def83f41fc6b3579","https://github.com/rsantamaria/papercrop","https://github.com/rsantamaria/papercrop/blob/master/CHANGELOG.md"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m44r-gv6q-9j9r","url":"https://osv.dev/vulnerability/GHSA-m44r-gv6q-9j9r"}],"summary":"papercrop does not properly handle crop input"}