{"action":"Upgrade passenger to 4.0.38 or later.","affected":[{"fixed":"4.0.38","introduced":"4.0.37"}],"component":"passenger","cve_ids":["CVE-2014-1832"],"ecosystem":"RubyGems","epss":0.00371,"exploited":false,"fixed_versions":["4.0.38"],"ghsa_id":"GHSA-qw8w-2xcp-xg59","id":"tcs_01M5KEN3HGM2TRM86MB6FRD224","modified_at":"2023-11-08T03:57:34.943941Z","published_at":"2018-10-10T17:29:27Z","references":["https://osv.dev/vulnerability/GHSA-qw8w-2xcp-xg59","https://nvd.nist.gov/vuln/detail/CVE-2014-1832","https://github.com/phusion/passenger/commit/94428057c602da3d6d34ef75c78091066ecac5c0","https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736958","https://bugzilla.redhat.com/show_bug.cgi?id=1058992","https://github.com/advisories/GHSA-qw8w-2xcp-xg59","https://github.com/phusion/passenger","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/passenger/CVE-2014-1832.yml","http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149032.html","http://openwall.com/lists/oss-security/2014/01/29/6","http://openwall.com/lists/oss-security/2014/01/30/3"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-qw8w-2xcp-xg59","url":"https://osv.dev/vulnerability/GHSA-qw8w-2xcp-xg59"}],"summary":"Insecure use of temporary files in Phusion passenger"}