{"action":"Upgrade pghero to 2.7.0 or later.","affected":[{"fixed":"2.7.0","introduced":"0"}],"component":"pghero","cve_ids":["CVE-2020-16253"],"ecosystem":"RubyGems","epss":0.00465,"exploited":false,"fixed_versions":["2.7.0"],"ghsa_id":"GHSA-v6fx-752r-ccp2","id":"tcs_01M5KENFCM8Q7FTMCZWCNJS1N0","modified_at":"2024-02-16T08:23:18.681389Z","published_at":"2020-08-05T14:53:43Z","references":["https://osv.dev/vulnerability/GHSA-v6fx-752r-ccp2","https://nvd.nist.gov/vuln/detail/CVE-2020-16253","https://github.com/ankane/pghero/issues/330","https://github.com/ankane/pghero/commit/14b67b32fed19a30aaf9826ee72f2a29cda604e9","https://github.com/ankane/pghero","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pghero/CVE-2020-16253.yml"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-v6fx-752r-ccp2","url":"https://osv.dev/vulnerability/GHSA-v6fx-752r-ccp2"}],"summary":"PgHero gem allows CSRF"}