{"action":"Upgrade omniauth-weibo-oauth2 to 0.5.1 or later.","affected":[{"fixed":"0.5.1","introduced":"0.4.6"}],"component":"omniauth-weibo-oauth2","cve_ids":["CVE-2019-17268"],"ecosystem":"RubyGems","epss":0.02437,"exploited":false,"fixed_versions":["0.5.1"],"ghsa_id":"GHSA-vr22-43gj-rx3f","id":"tcs_01M5KENN2BM0WXC6VTHF9Y8GE5","modified_at":"2023-11-08T04:01:23.253873Z","published_at":"2022-05-24T17:08:14Z","references":["https://osv.dev/vulnerability/GHSA-vr22-43gj-rx3f","https://nvd.nist.gov/vuln/detail/CVE-2019-17268","https://github.com/beenhero/omniauth-weibo-oauth2/issues/36","https://diff.coditsu.io/diffs/09a05c37-1b34-49e1-ac94-d4dda40d1ad1#d2h-971595","https://github.com/beenhero/omniauth-weibo-oauth2","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/omniauth-weibo-oauth2/CVE-2019-17268.yml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vr22-43gj-rx3f","url":"https://osv.dev/vulnerability/GHSA-vr22-43gj-rx3f"}],"summary":"omniauth-weibo-oauth2 included a code-execution backdoor inserted by a third party"}