{"action":"Upgrade simple_form to 5.0.0 or later.","affected":[{"fixed":"5.0.0","introduced":"0"}],"component":"simple_form","cve_ids":["CVE-2019-16676"],"ecosystem":"RubyGems","epss":0.034,"exploited":false,"fixed_versions":["5.0.0"],"ghsa_id":"GHSA-r74q-gxcg-73hx","id":"tcs_01M5KEN6KBDHF2CBHQ2DT95QHP","modified_at":"2026-08-27T03:56:00.389261319Z","published_at":"2019-09-30T19:41:15Z","references":["https://osv.dev/vulnerability/GHSA-r74q-gxcg-73hx","https://github.com/plataformatec/simple_form/security/advisories/GHSA-r74q-gxcg-73hx","https://nvd.nist.gov/vuln/detail/CVE-2019-16676","https://github.com/heartcombo/simple_form/commit/8c91bd76a5052ddf3e3ab9fd8333f9aa7b2e2dd6","https://github.com/advisories/GHSA-r74q-gxcg-73hx","https://github.com/heartcombo/simple_form","https://github.com/plataformatec/simple_form/commits/master","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/simple_form/CVE-2019-16676.yml","http://blog.plataformatec.com.br/2019/09/incorrect-access-control-in-simple-form-cve-2019-16676"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-r74q-gxcg-73hx","url":"https://osv.dev/vulnerability/GHSA-r74q-gxcg-73hx"}],"summary":"Improper Input Validation in simple_form"}