{"action":"Upgrade gemirro to 0.16.0 or later.","affected":[{"fixed":"0.16.0","introduced":"0"}],"component":"gemirro","cve_ids":["CVE-2017-16833"],"ecosystem":"RubyGems","epss":0.00814,"exploited":false,"fixed_versions":["0.16.0"],"ghsa_id":"GHSA-x7p2-x2j6-mwhr","id":"tcs_01M5KEP6YCZWDHW17M83CA3S8Y","modified_at":"2024-02-16T08:21:57.866595Z","published_at":"2017-11-29T23:19:51Z","references":["https://osv.dev/vulnerability/GHSA-x7p2-x2j6-mwhr","https://nvd.nist.gov/vuln/detail/CVE-2017-16833","https://github.com/PierreRambaud/gemirro/commit/9659f9b7ce15a723da8e361bd41b9203b19c97de","https://github.com/PierreRambaud/gemirro","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gemirro/CVE-2017-16833.yml"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-x7p2-x2j6-mwhr","url":"https://osv.dev/vulnerability/GHSA-x7p2-x2j6-mwhr"}],"summary":"Gemirro Stored XSS in Gemspec \"homepage\" value"}