{"action":"Upgrade gibbon to 3.4.4 or later.","affected":[{"fixed":"3.4.4","introduced":"0"}],"component":"gibbon","cve_ids":["CVE-2022-27311"],"ecosystem":"RubyGems","epss":0.01557,"exploited":false,"fixed_versions":["3.4.4"],"ghsa_id":"GHSA-vx9g-377x-xwxq","id":"tcs_01M5KENQN936YMAF445GM9NFZC","modified_at":"2023-11-08T04:08:58.171794Z","published_at":"2022-04-26T00:00:41Z","references":["https://osv.dev/vulnerability/GHSA-vx9g-377x-xwxq","https://nvd.nist.gov/vuln/detail/CVE-2022-27311","https://github.com/amro/gibbon/pull/321","https://github.com/amro/gibbon/pull/321#issuecomment-1113147155","https://github.com/amro/gibbon/commit/b2eb99ed304d7491a6d348a5bbdc83a008fc6e0b","https://github.com/amro/gibbon/commit/cade20ca2438cd1b182dad70cbb77fb895779d10","https://github.com/amro/gibbon","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gibbon/CVE-2022-27311.yml"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vx9g-377x-xwxq","url":"https://osv.dev/vulnerability/GHSA-vx9g-377x-xwxq"}],"summary":"Server side request forgery in gibbon"}