{"action":"Upgrade cremefraiche to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0"}],"component":"cremefraiche","cve_ids":["CVE-2013-2090"],"ecosystem":"RubyGems","epss":0.04247,"exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-m6f7-46hw-grcj","id":"tcs_01M5KEM58F2EDX1CYTQFD8K9EN","modified_at":"2023-11-08T03:57:17.360593Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-m6f7-46hw-grcj","https://nvd.nist.gov/vuln/detail/CVE-2013-2090","http://packetstormsecurity.com/files/121635/Ruby-Gem-Creme-Fraiche-0.6-Command-Injection.html","http://www.vapid.dhs.org/advisories/cremefraiche-cmd-inj.html"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-m6f7-46hw-grcj","url":"https://osv.dev/vulnerability/GHSA-m6f7-46hw-grcj"}],"summary":"Creme Fraiche contains OS Command Injection"}