{"action":"Upgrade rack to 1.1.5 or later.","affected":[{"fixed":"1.1.5","introduced":"1.1.0"},{"fixed":"1.2.7","introduced":"1.2.0"},{"fixed":"1.3.9","introduced":"1.3.0"},{"fixed":"1.4.4","introduced":"1.4.0"}],"component":"rack","cve_ids":["CVE-2013-0184"],"ecosystem":"RubyGems","epss":0.02418,"exploited":false,"fixed_versions":["1.1.5","1.2.7","1.3.9","1.4.4"],"ghsa_id":"GHSA-v882-ccj6-jc48","id":"tcs_01M5KENG4BPB5KH3S0WM53YJF5","modified_at":"2024-12-07T05:33:20.045140Z","published_at":"2022-05-05T02:48:31Z","references":["https://osv.dev/vulnerability/GHSA-v882-ccj6-jc48","https://nvd.nist.gov/vuln/detail/CVE-2013-0184","https://github.com/rack/rack/commit/1f61549529d07abd4aa512b8320ab0e97dcacc5d","https://access.redhat.com/errata/RHSA-2013:0544","https://access.redhat.com/errata/RHSA-2013:0548","https://access.redhat.com/security/cve/CVE-2013-0184","https://bugzilla.redhat.com/show_bug.cgi?id=895384","https://github.com/rack/rack","http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html","http://rhn.redhat.com/errata/RHSA-2013-0544.html","http://rhn.redhat.com/errata/RHSA-2013-0548.html","http://www.debian.org/security/2013/dsa-2783"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v882-ccj6-jc48","url":"https://osv.dev/vulnerability/GHSA-v882-ccj6-jc48"}],"summary":"Rack vulnerable to Denial of Service"}