{"action":"Upgrade ruby-jss to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"0"}],"component":"ruby-jss","cve_ids":["CVE-2021-33575"],"ecosystem":"RubyGems","epss":0.02603,"exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-vmfh-c547-v45h","id":"tcs_01M5KENK8DE9RKHY8HYG3JJZ87","modified_at":"2024-12-05T05:40:04.419664Z","published_at":"2021-10-06T17:48:27Z","references":["https://osv.dev/vulnerability/GHSA-vmfh-c547-v45h","https://nvd.nist.gov/vuln/detail/CVE-2021-33575","https://github.com/PixarAnimationStudios/ruby-jss","https://github.com/PixarAnimationStudios/ruby-jss/blob/e6d48dd8c77f9275c76787d60d3472615fcd9b77/CHANGES.md#160---2021-05-24","https://github.com/advisories/GHSA-vmfh-c547-v45h","https://github.com/patsplat/plist/tree/ce8f9ae42a114f603ea200c955e420782bffc4ad#label-Security+considerations","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-jss/CVE-2021-33575.yml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vmfh-c547-v45h","url":"https://osv.dev/vulnerability/GHSA-vmfh-c547-v45h"}],"summary":"Remote code execution in ruby-jss"}