{"action":"Upgrade rotp to 6.3.0 or later.","affected":[{"fixed":"6.3.0","introduced":"6.2.1"}],"component":"rotp","cve_ids":["CVE-2024-28862"],"ecosystem":"RubyGems","epss":0.00176,"exploited":false,"fixed_versions":["6.3.0"],"ghsa_id":"GHSA-x2h8-qmj4-g62f","id":"tcs_01M5KEP3J9QQ54RNCVYE0SHEEM","modified_at":"2025-12-05T18:51:59.046252Z","published_at":"2024-03-18T17:21:46Z","references":["https://osv.dev/vulnerability/GHSA-x2h8-qmj4-g62f","https://github.com/mdp/rotp/security/advisories/GHSA-x2h8-qmj4-g62f","https://nvd.nist.gov/vuln/detail/CVE-2024-28862","https://github.com/mdp/rotp","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rotp/CVE-2024-28862.yml"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-x2h8-qmj4-g62f","url":"https://osv.dev/vulnerability/GHSA-x2h8-qmj4-g62f"}],"summary":"ROTP 6.2.2 and 6.2.1 has 0666 permissions for the .rb files."}