{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.5.2"}],"component":"karo","cve_ids":["CVE-2014-10075"],"ecosystem":"RubyGems","epss":0.03537,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qfwq-chf4-jvwg","id":"tcs_01M5KEMYN0DH3N3MGYFEAHRD25","modified_at":"2025-08-15T14:26:31.518025Z","published_at":"2022-05-14T01:49:44Z","references":["https://osv.dev/vulnerability/GHSA-qfwq-chf4-jvwg","https://nvd.nist.gov/vuln/detail/CVE-2014-10075","https://github.com/rahult/karo","https://github.com/rahult/karo/blob/master/lib/karo/db.rb#L76","https://github.com/rahult/karo/blob/master/lib/karo/db.rb#L95","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/karo/CVE-2014-10075.yml","http://www.vapid.dhs.org/advisories/karo-2.3.8.html","http://www.vapidlabs.com/advisory.php?v=63"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-qfwq-chf4-jvwg","url":"https://osv.dev/vulnerability/GHSA-qfwq-chf4-jvwg"}],"summary":"karo Metacharacter Handling Remote Command Execution"}