{"action":"Upgrade better_errors to 2.8.0 or later.","affected":[{"fixed":"2.8.0","introduced":"0"}],"component":"better_errors","cve_ids":["CVE-2021-39197"],"ecosystem":"RubyGems","epss":0.00641,"exploited":false,"fixed_versions":["2.8.0"],"ghsa_id":"GHSA-w3j4-76qw-wwjm","id":"tcs_01M5KENRR0HMVE5WKZ59M7CAPV","modified_at":"2026-07-08T06:29:04.043069140Z","published_at":"2021-09-07T23:08:24Z","references":["https://osv.dev/vulnerability/GHSA-w3j4-76qw-wwjm","https://github.com/BetterErrors/better_errors/security/advisories/GHSA-w3j4-76qw-wwjm","https://nvd.nist.gov/vuln/detail/CVE-2021-39197","https://github.com/BetterErrors/better_errors/pull/474","https://github.com/BetterErrors/better_errors/commit/8e8e796bfbde4aa088741823c8a3fc6df2089bb0","https://github.com/BetterErrors/better_errors","https://github.com/BetterErrors/better_errors/discussions/507","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/better_errors/CVE-2021-39197.yml"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-w3j4-76qw-wwjm","url":"https://osv.dev/vulnerability/GHSA-w3j4-76qw-wwjm"}],"summary":"Older releases of better_errors open to Cross-Site Request Forgery attack"}