{"action":"Upgrade dragonfly to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"dragonfly","cve_ids":["CVE-2013-5671"],"ecosystem":"RubyGems","epss":0.02188,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-qrgf-jqqm-x7xv","id":"tcs_01M5KEN25KH8P0VWRTMRTPC1VM","modified_at":"2024-12-08T05:34:08.990355Z","published_at":"2017-10-24T18:33:37Z","references":["https://osv.dev/vulnerability/GHSA-qrgf-jqqm-x7xv","https://nvd.nist.gov/vuln/detail/CVE-2013-5671","https://github.com/markevans/dragonfly/issues/520","https://github.com/github/advisory-database/pull/486","https://github.com/markevans/dragonfly","https://web.archive.org/web/20201208033320/http://www.vapid.dhs.org/advisories/fog-dragonfly-0.8.2-cmd-inj.html","http://seclists.org/fulldisclosure/2013/Sep/18","http://seclists.org/oss-sec/2013/q3/526","http://seclists.org/oss-sec/2013/q3/528"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qrgf-jqqm-x7xv","url":"https://osv.dev/vulnerability/GHSA-qrgf-jqqm-x7xv"}],"summary":"Code injection in dragonfly gem"}