Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/76812?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/76812?format=api", "purl": "pkg:ebuild/dev-ruby/rubygems@2.6.13", "type": "ebuild", "namespace": "dev-ruby", "name": "rubygems", "version": "2.6.13", "qualifiers": {}, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8117?format=api", "vulnerability_id": "VCID-b36p-re17-n7dq", "summary": "Improper Input Validation\nRubyGems is vulnerable to maliciously crafted gem specifications to cause a denial of service attack against RubyGems clients who have issued a `query` command.", "references": [ { "reference_url": "http://blog.rubygems.org/2017/08/27/2.6.13-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://blog.rubygems.org/2017/08/27/2.6.13-released.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3485", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:3485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0378", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0583", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0583" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0585", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0585" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0900.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0900.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0900", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93539", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93476", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93484", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93491", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93499", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93502", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93507", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93508", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93527", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.11232", "scoring_system": "epss", "scoring_elements": "0.93533", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0900" }, { "reference_url": "https://blog.rubygems.org/2017/08/27/2.6.13-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "" } ], "url": "https://blog.rubygems.org/2017/08/27/2.6.13-released.html" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9096", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9096" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0899", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0899" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0900", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0900" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0901", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0901" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0902", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0902" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14064", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14064" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/rubygems/rubygems", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubygems/rubygems" }, { "reference_url": "https://github.com/rubygems/rubygems/commit/8a38a4fc24c6591e6c8f43d1fadab6efeb4d6251", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubygems/rubygems/commit/8a38a4fc24c6591e6c8f43d1fadab6efeb4d6251" }, { "reference_url": "https://hackerone.com/reports/243003", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://hackerone.com/reports/243003" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html" }, { "reference_url": "https://web.archive.org/web/20190212090616/http://www.securitytracker.com/id/1039249", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20190212090616/http://www.securitytracker.com/id/1039249" }, { "reference_url": "https://web.archive.org/web/20200227143907/http://www.securityfocus.com/bid/100579", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200227143907/http://www.securityfocus.com/bid/100579" }, { "reference_url": "https://www.debian.org/security/2017/dsa-3966", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2017/dsa-3966" }, { "reference_url": "http://www.securityfocus.com/bid/100579", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/100579" }, { "reference_url": "http://www.securitytracker.com/id/1039249", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1039249" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1487588", "reference_id": "1487588", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1487588" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0900", "reference_id": "CVE-2017-0900", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0900" }, { "reference_url": "https://github.com/advisories/GHSA-p7f2-rr42-m9xm", "reference_id": "GHSA-p7f2-rr42-m9xm", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p7f2-rr42-m9xm" }, { "reference_url": "https://security.gentoo.org/glsa/201710-01", "reference_id": "GLSA-201710-01", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/201710-01" }, { "reference_url": "https://usn.ubuntu.com/3439-1/", "reference_id": "USN-3439-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3439-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76812?format=api", "purl": "pkg:ebuild/dev-ruby/rubygems@2.6.13", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-ruby/rubygems@2.6.13" } ], "aliases": [ "CVE-2017-0900", "GHSA-p7f2-rr42-m9xm" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-b36p-re17-n7dq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8116?format=api", "vulnerability_id": "VCID-jmzh-89dm-r7g2", "summary": "Origin Validation Error\nRubyGems is vulnerable to a DNS hijacking vulnerability that allows a MITM attacker to force the RubyGems client to download and install gems from a server that the attacker controls.", "references": [ { "reference_url": "http://blog.rubygems.org/2017/08/27/2.6.13-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://blog.rubygems.org/2017/08/27/2.6.13-released.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3485", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:3485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0378", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0583", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0583" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0585", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0585" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0902.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0902.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0902", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89915", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89947", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89952", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.8995", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89936", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89943", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89945", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89937", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89894", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89898", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.89932", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.05207", "scoring_system": "epss", "scoring_elements": "0.8991", "published_at": "2026-04-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0902" }, { "reference_url": "https://blog.rubygems.org/2017/08/27/2.6.13-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3", "scoring_elements": "" } ], "url": "https://blog.rubygems.org/2017/08/27/2.6.13-released.html" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9096", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9096" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0899", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0899" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0900", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0900" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0901", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0901" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0902", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0902" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14064", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14064" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.6", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:H/Au:N/C:C/I:C/A:C" }, { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/rubygems/rubygems", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubygems/rubygems" }, { "reference_url": "https://github.com/rubygems/rubygems/commit/8d91516fb7037ecfb27622f605dc40245e0f8d32", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubygems/rubygems/commit/8d91516fb7037ecfb27622f605dc40245e0f8d32" }, { "reference_url": "https://hackerone.com/reports/218088", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://hackerone.com/reports/218088" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html" }, { "reference_url": "https://usn.ubuntu.com/3553-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/3553-1" }, { "reference_url": "https://usn.ubuntu.com/3553-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3553-1/" }, { "reference_url": "https://usn.ubuntu.com/3685-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/3685-1" }, { "reference_url": "https://usn.ubuntu.com/3685-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3685-1/" }, { "reference_url": "https://web.archive.org/web/20170907040741/http://www.securityfocus.com/bid/100586", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170907040741/http://www.securityfocus.com/bid/100586" }, { "reference_url": "https://web.archive.org/web/20170907215801/http://www.securitytracker.com/id/1039249", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170907215801/http://www.securitytracker.com/id/1039249" }, { "reference_url": "https://www.debian.org/security/2017/dsa-3966", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2017/dsa-3966" }, { "reference_url": "http://www.securityfocus.com/bid/100586", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/100586" }, { "reference_url": "http://www.securitytracker.com/id/1039249", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1039249" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1487589", "reference_id": "1487589", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1487589" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0902", "reference_id": "CVE-2017-0902", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0902" }, { "reference_url": "https://github.com/advisories/GHSA-73w7-6w9g-gc8w", "reference_id": "GHSA-73w7-6w9g-gc8w", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-73w7-6w9g-gc8w" }, { "reference_url": "https://security.gentoo.org/glsa/201710-01", "reference_id": "GLSA-201710-01", "reference_type": "", "scores": [ { "value": "8.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/201710-01" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76812?format=api", "purl": "pkg:ebuild/dev-ruby/rubygems@2.6.13", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-ruby/rubygems@2.6.13" } ], "aliases": [ "CVE-2017-0902", "GHSA-73w7-6w9g-gc8w" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jmzh-89dm-r7g2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8119?format=api", "vulnerability_id": "VCID-xgsa-5umz-qffr", "summary": "Code Injection\nRubyGems is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specification would execute terminal escape sequences.", "references": [ { "reference_url": "http://blog.rubygems.org/2017/08/27/2.6.13-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://blog.rubygems.org/2017/08/27/2.6.13-released.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3485", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:3485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0378", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0583", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0583" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0585", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0585" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0899.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0899.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0899", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.9173", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.91672", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.9168", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.91686", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.91695", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.91707", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.91714", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.91717", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.9172", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.91716", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.91736", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.07362", "scoring_system": "epss", "scoring_elements": "0.91729", "published_at": "2026-04-18T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0899" }, { "reference_url": "https://blog.rubygems.org/2017/08/27/2.6.13-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3", "scoring_elements": "" } ], "url": "https://blog.rubygems.org/2017/08/27/2.6.13-released.html" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9096", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9096" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0899", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0899" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0900", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0900" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0901", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0901" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0902", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0902" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14064", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14064" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:P/I:P/A:P" }, { "value": "4.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/rubygems/rubygems", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubygems/rubygems" }, { "reference_url": "https://github.com/rubygems/rubygems/commit/1bcbc7fe637b03145401ec9c094066285934a7f1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubygems/rubygems/commit/1bcbc7fe637b03145401ec9c094066285934a7f1" }, { "reference_url": "https://github.com/rubygems/rubygems/commit/ef0aa611effb5f54d40c7fba6e8235eb43c5a491", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubygems/rubygems/commit/ef0aa611effb5f54d40c7fba6e8235eb43c5a491" }, { "reference_url": "https://hackerone.com/reports/226335", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://hackerone.com/reports/226335" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html" }, { "reference_url": "https://web.archive.org/web/20170907215801/http://www.securitytracker.com/id/1039249", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170907215801/http://www.securitytracker.com/id/1039249" }, { "reference_url": "https://web.archive.org/web/20170915000000*/http://www.securityfocus.com/bid/100576#:~:text=1%20snapshot-,11%3A49%3A33,-Note", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170915000000*/http://www.securityfocus.com/bid/100576#:~:text=1%20snapshot-,11%3A49%3A33,-Note" }, { "reference_url": "https://www.debian.org/security/2017/dsa-3966", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2017/dsa-3966" }, { "reference_url": "http://www.securityfocus.com/bid/100576", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/100576" }, { "reference_url": "http://www.securitytracker.com/id/1039249", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1039249" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1487590", "reference_id": "1487590", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1487590" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0899", "reference_id": "CVE-2017-0899", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0899" }, { "reference_url": "https://github.com/advisories/GHSA-7gcp-2gmq-w3xh", "reference_id": "GHSA-7gcp-2gmq-w3xh", "reference_type": "", "scores": [ { "value": "CRITICAL", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7gcp-2gmq-w3xh" }, { "reference_url": "https://security.gentoo.org/glsa/201710-01", "reference_id": "GLSA-201710-01", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/201710-01" }, { "reference_url": "https://usn.ubuntu.com/3439-1/", "reference_id": "USN-3439-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3439-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76812?format=api", "purl": "pkg:ebuild/dev-ruby/rubygems@2.6.13", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-ruby/rubygems@2.6.13" } ], "aliases": [ "CVE-2017-0899", "GHSA-7gcp-2gmq-w3xh" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xgsa-5umz-qffr" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8118?format=api", "vulnerability_id": "VCID-xz68-vwz2-2ke4", "summary": "Improper Input Validation\nRubyGems fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.", "references": [ { "reference_url": "http://blog.rubygems.org/2017/08/27/2.6.13-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://blog.rubygems.org/2017/08/27/2.6.13-released.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:3485", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2017:3485" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0378", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0378" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0583", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0583" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2018:0585", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2018:0585" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0901.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-0901.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0901", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95267", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95262", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95265", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95254", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95251", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.9525", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95245", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95242", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95234", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95231", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95229", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.18555", "scoring_system": "epss", "scoring_elements": "0.95217", "published_at": "2026-04-01T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-0901" }, { "reference_url": "https://blog.rubygems.org/2017/08/27/2.6.13-released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "" } ], "url": "https://blog.rubygems.org/2017/08/27/2.6.13-released.html" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9096", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9096" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7798", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7798" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0899", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0899" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0900", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0900" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0901", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0901" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0902", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0902" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14064", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14064" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.9", "scoring_system": "cvssv2", "scoring_elements": "AV:L/AC:L/Au:N/C:N/I:C/A:N" }, { "value": "5.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/rubygems/rubygems", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubygems/rubygems" }, { "reference_url": "https://github.com/rubygems/rubygems/commit/ad5c0a53a86ca5b218c7976765c0365b91d22cb2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/rubygems/rubygems/commit/ad5c0a53a86ca5b218c7976765c0365b91d22cb2" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00012.html" }, { "reference_url": "https://usn.ubuntu.com/3553-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/3553-1" }, { "reference_url": "https://usn.ubuntu.com/3553-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3553-1/" }, { "reference_url": "https://usn.ubuntu.com/3685-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://usn.ubuntu.com/3685-1" }, { "reference_url": "https://usn.ubuntu.com/3685-1/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3685-1/" }, { "reference_url": "https://web.archive.org/web/20170907215801/http://www.securitytracker.com/id/1039249", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170907215801/http://www.securitytracker.com/id/1039249" }, { "reference_url": "https://web.archive.org/web/20170915000000*/http://www.securityfocus.com/bid/100580#:~:text=1%20snapshot-,16%3A05%3A26,-Note", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20170915000000*/http://www.securityfocus.com/bid/100580#:~:text=1%20snapshot-,16%3A05%3A26,-Note" }, { "reference_url": "https://www.debian.org/security/2017/dsa-3966", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.debian.org/security/2017/dsa-3966" }, { "reference_url": "https://www.exploit-db.com/exploits/42611", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.exploit-db.com/exploits/42611" }, { "reference_url": "https://www.exploit-db.com/exploits/42611/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.exploit-db.com/exploits/42611/" }, { "reference_url": "http://www.securityfocus.com/bid/100580", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/100580" }, { "reference_url": "http://www.securitytracker.com/id/1039249", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id/1039249" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1487587", "reference_id": "1487587", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1487587" }, { "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/42611.txt", "reference_id": "CVE-2017-0901", "reference_type": "exploit", "scores": [], "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/42611.txt" }, { "reference_url": "https://hackerone.com/reports/243156", "reference_id": "CVE-2017-0901", "reference_type": "exploit", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://hackerone.com/reports/243156" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0901", "reference_id": "CVE-2017-0901", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-0901" }, { "reference_url": "https://github.com/advisories/GHSA-pm9x-4392-2c2p", "reference_id": "GHSA-pm9x-4392-2c2p", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-pm9x-4392-2c2p" }, { "reference_url": "https://security.gentoo.org/glsa/201710-01", "reference_id": "GLSA-201710-01", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.gentoo.org/glsa/201710-01" }, { "reference_url": "https://usn.ubuntu.com/3439-1/", "reference_id": "USN-3439-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/3439-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/76812?format=api", "purl": "pkg:ebuild/dev-ruby/rubygems@2.6.13", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-ruby/rubygems@2.6.13" } ], "aliases": [ "CVE-2017-0901", "GHSA-pm9x-4392-2c2p" ], "risk_score": 10.0, "exploitability": "2.0", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-xz68-vwz2-2ke4" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-ruby/rubygems@2.6.13" }