{"action":"Upgrade mail to 2.5.5 or later.","affected":[{"fixed":"2.5.5","introduced":"0"}],"component":"mail","cve_ids":["CVE-2015-9097"],"ecosystem":"RubyGems","epss":0.03396,"exploited":false,"fixed_versions":["2.5.5"],"ghsa_id":"GHSA-q86f-fmqf-qrf6","id":"tcs_01M5KEMW9EPX4Z28R84Q86EW73","modified_at":"2024-02-16T08:18:19.574996Z","published_at":"2017-10-24T18:33:36Z","references":["https://osv.dev/vulnerability/GHSA-q86f-fmqf-qrf6","https://nvd.nist.gov/vuln/detail/CVE-2015-9097","https://github.com/rubysec/ruby-advisory-db/issues/215","https://github.com/mikel/mail/pull/1097","https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83","https://hackerone.com/reports/137631","https://github.com/advisories/GHSA-q86f-fmqf-qrf6","https://github.com/mikel/mail","https://rubysec.com/advisories/mail-OSVDB-131677","http://openwall.com/lists/oss-security/2015/12/11/3","http://www.mbsd.jp/Whitepaper/smtpi.pdf"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-q86f-fmqf-qrf6","url":"https://osv.dev/vulnerability/GHSA-q86f-fmqf-qrf6"}],"summary":"Mail Gem CRLF Injection vulnerability"}