{"action":"Upgrade resque to 2.6.0 or later.","affected":[{"fixed":"2.6.0","introduced":"0"}],"component":"resque","cve_ids":["CVE-2023-50727"],"ecosystem":"RubyGems","epss":0.00514,"exploited":false,"fixed_versions":["2.6.0"],"ghsa_id":"GHSA-r9mq-m72x-257g","id":"tcs_01M5KEN89NWV9MC74S02231MXN","modified_at":"2026-09-10T03:50:04.678067149Z","published_at":"2023-12-18T19:33:58Z","references":["https://osv.dev/vulnerability/GHSA-r9mq-m72x-257g","https://github.com/resque/resque/security/advisories/GHSA-r9mq-m72x-257g","https://nvd.nist.gov/vuln/detail/CVE-2023-50727","https://github.com/resque/resque/pull/1865","https://github.com/resque/resque/commit/7623b8dfbdd0a07eb04b19fb25b16a8d6f087f9a","https://github.com/resque/resque","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/resque/CVE-2023-50727.yml"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-r9mq-m72x-257g","url":"https://osv.dev/vulnerability/GHSA-r9mq-m72x-257g"}],"summary":"Resque vulnerable to reflected XSS in Queue Endpoint"}