{"action":"Upgrade em-http-request to 1.1.6 or later.","affected":[{"fixed":"1.1.6","introduced":"0"}],"component":"em-http-request","cve_ids":["CVE-2020-13482"],"ecosystem":"RubyGems","epss":0.00928,"exploited":false,"fixed_versions":["1.1.6"],"ghsa_id":"GHSA-q27f-v3r6-9v77","id":"tcs_01M5KEMR3F8T6GTMZP1AWDY16E","modified_at":"2024-02-16T08:17:37.719932Z","published_at":"2021-05-24T18:13:13Z","references":["https://osv.dev/vulnerability/GHSA-q27f-v3r6-9v77","https://nvd.nist.gov/vuln/detail/CVE-2020-13482","https://github.com/igrigorik/em-http-request/issues/339","https://github.com/igrigorik/em-http-request/commit/e5fa144f8d21050dd1fc15a4dc8aa34ac6f30602","https://github.com/advisories/GHSA-q27f-v3r6-9v77","https://github.com/igrigorik/em-http-request","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/em-http-request/CVE-2020-13482.yml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKYP5TR5NTVVDX5R4HCNNH2OQR7M4X3J","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z32PUJA6RGBZ3TKSOTGUXZ45662S3MVF","https://securitylab.github.com/advisories/GHSL-2020-094-igrigorik-em-http-request"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-q27f-v3r6-9v77","url":"https://osv.dev/vulnerability/GHSA-q27f-v3r6-9v77"}],"summary":"Improper Certificate Validation in EM-HTTP-Request"}