{"action":"Upgrade rubocop to 0.49.0 or later.","affected":[{"fixed":"0.49.0","introduced":"0"}],"component":"rubocop","cve_ids":["CVE-2017-8418"],"ecosystem":"RubyGems","epss":0.00409,"exploited":false,"fixed_versions":["0.49.0"],"ghsa_id":"GHSA-wmjf-jpjj-9f3j","id":"tcs_01M5KENZG8XZGAREX0W9ER2APK","modified_at":"2024-02-16T08:14:31.038093Z","published_at":"2017-11-15T20:39:47Z","references":["https://osv.dev/vulnerability/GHSA-wmjf-jpjj-9f3j","https://nvd.nist.gov/vuln/detail/CVE-2017-8418","https://github.com/bbatsov/rubocop/issues/4336","https://github.com/rubocop/rubocop/commit/dcb258fabd5f2624c1ea0e1634763094590c09d7","https://github.com/bbatsov/rubocop","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rubocop/CVE-2017-8418.yml","http://www.openwall.com/lists/oss-security/2017/05/01/14"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-wmjf-jpjj-9f3j","url":"https://osv.dev/vulnerability/GHSA-wmjf-jpjj-9f3j"}],"summary":"RuboCop gem Insecure use of /tmp"}