{"action":"Upgrade savon to 2.17.2 or later.","affected":[{"fixed":"2.17.2","introduced":"0.9.8"}],"component":"savon","cve_ids":["CVE-2026-53510"],"ecosystem":"RubyGems","epss":0.00687,"exploited":false,"fixed_versions":["2.17.2"],"ghsa_id":"GHSA-mx5j-mp4f-g8jg","id":"tcs_01M5KEMCCEG6FKWHJ31TQ3HFCC","modified_at":"2026-07-31T19:56:42.936890Z","published_at":"2026-07-31T19:38:25Z","references":["https://osv.dev/vulnerability/GHSA-mx5j-mp4f-g8jg","https://github.com/savonrb/savon/security/advisories/GHSA-mx5j-mp4f-g8jg","https://github.com/savonrb/savon/commit/8f22eb543e7436f6247172c9be47e22792d375e9","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/savon/CVE-2026-53510.yml","https://github.com/savonrb/savon","https://github.com/savonrb/savon/releases/tag/v2.17.2","https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-53510"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-mx5j-mp4f-g8jg","url":"https://osv.dev/vulnerability/GHSA-mx5j-mp4f-g8jg"}],"summary":"Savon::Model evaluates WSDL operation names as Ruby source"}