{"action":"Upgrade dragonfly to 0.8.6 or later.","affected":[{"fixed":"0.8.6","introduced":"0.7"},{"fixed":"0.9.13","introduced":"0.9"}],"component":"dragonfly","cve_ids":["CVE-2013-1756"],"ecosystem":"RubyGems","epss":0.03713,"exploited":false,"fixed_versions":["0.8.6","0.9.13"],"ghsa_id":"GHSA-p463-639r-q9g9","id":"tcs_01M5KEMD9XJ6TAAT1Z4HHPMJ3D","modified_at":"2025-04-14T22:11:14.796580Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-p463-639r-q9g9","https://nvd.nist.gov/vuln/detail/CVE-2013-1756","https://github.com/markevans/dragonfly/commit/a8775aacf9e5c81cf11bec34b7afa7f27ddfe277","https://exchange.xforce.ibmcloud.com/vulnerabilities/82476","https://github.com/markevans/dragonfly","https://groups.google.com/forum/?fromgroups=#!topic/dragonfly-users/3c3WIU3VQTo","https://web.archive.org/web/20200229103538/http://www.securityfocus.com/bid/58225"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-p463-639r-q9g9","url":"https://osv.dev/vulnerability/GHSA-p463-639r-q9g9"}],"summary":"Dragonfly Code Injection vulnerability"}