{"action":"Upgrade yajl-ruby to 1.3.1 or later.","affected":[{"fixed":"1.3.1","introduced":"0"}],"component":"yajl-ruby","cve_ids":["CVE-2017-16516"],"ecosystem":"RubyGems","epss":0.03798,"exploited":false,"fixed_versions":["1.3.1"],"ghsa_id":"GHSA-wwh7-4jw9-33x6","id":"tcs_01M5KEP1RYEZ1YY56GCSD1FN9W","modified_at":"2024-02-16T08:18:26.151930Z","published_at":"2017-11-28T22:44:42Z","references":["https://osv.dev/vulnerability/GHSA-wwh7-4jw9-33x6","https://nvd.nist.gov/vuln/detail/CVE-2017-16516","https://github.com/brianmario/yajl-ruby/issues/176","https://github.com/brianmario/yajl-ruby/pull/178","https://github.com/github/advisory-database/pull/2158","https://github.com/brianmario/yajl-ruby/commit/a8ca8f476655adaa187eedc60bdc770fff3c51ce","https://github.com/brianmario/yajl-ruby","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/yajl-ruby/CVE-2017-16516.yml","https://lists.debian.org/debian-lts-announce/2017/11/msg00010.html","https://lists.debian.org/debian-lts-announce/2023/07/msg00013.html","https://lists.debian.org/debian-lts-announce/2023/08/msg00003.html","https://rubygems.org/gems/yajl-ruby"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wwh7-4jw9-33x6","url":"https://osv.dev/vulnerability/GHSA-wwh7-4jw9-33x6"}],"summary":"yajl-ruby gem Denial of Service vulnerability"}