{"action":"Upgrade ruby-i18n to 0.7.0-3 or later.","affected":[{"fixed":"0.7.0-3","introduced":"0"}],"component":"ruby-i18n","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["0.7.0-3"],"id":"tcs_01M5NAPNNBKMAK5M99YEM49WZP","modified_at":"2026-10-23T16:01:11.357692758Z","published_at":"2018-11-06T15:29:00.230Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2014-10077","https://security-tracker.debian.org/tracker/CVE-2014-10077"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2014-10077#Debian:14/ruby-i18n","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2014-10077"}],"summary":"Hash#slice in lib/i18n/core_ext/hash.rb in the i18n gem before 0.8.0 for Ruby allows remote attackers to cause a denial of service (application crash) via a call in a situation where :some_key is pres"}