{"action":"Upgrade ox to 2.8.2 or later.","affected":[{"fixed":"2.8.2","introduced":"0"}],"component":"ox","cve_ids":["CVE-2017-16229"],"ecosystem":"RubyGems","epss":0.00965,"exploited":false,"fixed_versions":["2.8.2"],"ghsa_id":"GHSA-wfwm-chj7-w59r","id":"tcs_01M5KENXMKQF3F8G74AT5E1MY7","modified_at":"2024-02-16T08:21:34.646079Z","published_at":"2018-03-05T18:29:32Z","references":["https://osv.dev/vulnerability/GHSA-wfwm-chj7-w59r","https://nvd.nist.gov/vuln/detail/CVE-2017-16229","https://github.com/ohler55/ox/issues/195","https://github.com/ohler55/ox","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ox/CVE-2017-16229.yml","https://rubygems.org/gems/ox/versions/2.8.1"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-wfwm-chj7-w59r","url":"https://osv.dev/vulnerability/GHSA-wfwm-chj7-w59r"}],"summary":"Ox gem stack overflow in sax_parse"}