{"action":"No fix published. Pin and monitor.","affected":[],"component":"lawn-login","cve_ids":["CVE-2014-5000"],"ecosystem":"RubyGems","epss":0.00522,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rhgq-vv9x-j4p5","id":"tcs_01M5KEN9CX62BKN05TXYC5H3HA","modified_at":"2023-11-08T03:57:42.957703Z","published_at":"2018-01-22T23:45:33Z","references":["https://osv.dev/vulnerability/GHSA-rhgq-vv9x-j4p5","https://nvd.nist.gov/vuln/detail/CVE-2014-5000","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/lawn-login/CVE-2014-5000.yml","https://github.com/skalnik/lawn-login","https://web.archive.org/web/20200229060607/http://www.vapid.dhs.org/advisories/lawn-login-0.0.7.html"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-rhgq-vv9x-j4p5","url":"https://osv.dev/vulnerability/GHSA-rhgq-vv9x-j4p5"}],"summary":"lawn-login exposes database password to unauthorized users"}