{"url":"http://public2.vulnerablecode.io/api/packages/142996?format=json","purl":"pkg:apk/alpine/ruby@3.0.3-r0?arch=armv7&distroversion=v3.24&reponame=main","type":"apk","namespace":"alpine","name":"ruby","version":"3.0.3-r0","qualifiers":{"arch":"armv7","distroversion":"v3.24","reponame":"main"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"3.1.2-r0","latest_non_vulnerable_version":"3.4.9-r0","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/178776?format=json","vulnerability_id":"VCID-uyf1-pfsp-aqbw","summary":"Multiple vulnerabilities have been discovered in Ruby, the worst of which could lead to execution of arbitrary code.","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41816","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41816"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41817","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41817"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41819","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41819"},{"reference_url":"https://github.com/ruby/cgi/commit/959ccf0b6a672bcc64aeaa60c6e1f9e728f1e87f","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ruby/cgi/commit/959ccf0b6a672bcc64aeaa60c6e1f9e728f1e87f"},{"reference_url":"https://github.com/ruby/cgi/commit/ad079c1cb5f58eba1ffac46da79995fcf94a3a6e","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ruby/cgi/commit/ad079c1cb5f58eba1ffac46da79995fcf94a3a6e"},{"reference_url":"https://github.com/ruby/cgi/commit/c6a37a671b556eb06140ea89cc465136b24207a6","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ruby/cgi/commit/c6a37a671b556eb06140ea89cc465136b24207a6"},{"reference_url":"https://github.com/ruby/cgi/commit/c728632c1c09d46cfd4ecbff9caaa3651dd1002a","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ruby/cgi/commit/c728632c1c09d46cfd4ecbff9caaa3651dd1002a"},{"reference_url":"https://groups.google.com/g/ruby-security-ann/c/4MQ568ZG47c","reference_id":"","reference_type":"","scores":[],"url":"https://groups.google.com/g/ruby-security-ann/c/4MQ568ZG47c"},{"reference_url":"https://hackerone.com/reports/1328463","reference_id":"","reference_type":"","scores":[],"url":"https://hackerone.com/reports/1328463"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/"},{"reference_url":"https://security.netapp.com/advisory/ntap-20220303-0006/","reference_id":"","reference_type":"","scores":[],"url":"https://security.netapp.com/advisory/ntap-20220303-0006/"},{"reference_url":"https://www.ruby-lang.org/en/news/2021/11/24/buffer-overrun-in-cgi-escape_html-cve-2021-41816/","reference_id":"","reference_type":"","scores":[],"url":"https://www.ruby-lang.org/en/news/2021/11/24/buffer-overrun-in-cgi-escape_html-cve-2021-41816/"},{"reference_url":"https://security.archlinux.org/AVG-2582","reference_id":"AVG-2582","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2582"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41816","reference_id":"CVE-2021-41816","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41816"},{"reference_url":"https://security-tracker.debian.org/tracker/CVE-2021-41816","reference_id":"CVE-2021-41816","reference_type":"","scores":[],"url":"https://security-tracker.debian.org/tracker/CVE-2021-41816"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2021-41816.yml","reference_id":"CVE-2021-41816.YML","reference_type":"","scores":[],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/cgi/CVE-2021-41816.yml"},{"reference_url":"https://github.com/advisories/GHSA-5cqm-crxm-6qpv","reference_id":"GHSA-5cqm-crxm-6qpv","reference_type":"","scores":[{"value":"CRITICAL","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5cqm-crxm-6qpv"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/142996?format=json","purl":"pkg:apk/alpine/ruby@3.0.3-r0?arch=armv7&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ruby@3.0.3-r0%3Farch=armv7&distroversion=v3.24&reponame=main"}],"aliases":["CVE-2021-41816","GHSA-5cqm-crxm-6qpv"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-uyf1-pfsp-aqbw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/10123?format=json","vulnerability_id":"VCID-zf4z-vjzg-m3dk","summary":"","references":[{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28965","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28965"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31799","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31799"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31810","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31810"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32066","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32066"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41816","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41816"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41817","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41817"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41819","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41819"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/ruby/date/commit/3959accef8da5c128f8a8e2fd54e932a4fb253b0","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/ruby/date/commit/3959accef8da5c128f8a8e2fd54e932a4fb253b0"},{"reference_url":"https://hackerone.com/reports/1254844","reference_id":"","reference_type":"","scores":[],"url":"https://hackerone.com/reports/1254844"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IUXQCH6FRKANCVZO2Q7D2SQX33FP3KWN/"},{"reference_url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/","reference_id":"","reference_type":"","scores":[],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTOJGS5IEFDK3UOO7IY4OTTFGHGLSWZF/"},{"reference_url":"https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/","reference_id":"","reference_type":"","scores":[],"url":"https://www.ruby-lang.org/en/news/2021/11/15/date-parsing-method-regexp-dos-cve-2021-41817/"},{"reference_url":"https://security.archlinux.org/AVG-2555","reference_id":"AVG-2555","reference_type":"","scores":[{"value":"Medium","scoring_system":"archlinux","scoring_elements":""}],"url":"https://security.archlinux.org/AVG-2555"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41817","reference_id":"CVE-2021-41817","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41817"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/date/CVE-2021-41817.yml","reference_id":"CVE-2021-41817.YML","reference_type":"","scores":[],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/date/CVE-2021-41817.yml"},{"reference_url":"https://github.com/advisories/GHSA-qg54-694p-wgpp","reference_id":"GHSA-qg54-694p-wgpp","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-qg54-694p-wgpp"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/142996?format=json","purl":"pkg:apk/alpine/ruby@3.0.3-r0?arch=armv7&distroversion=v3.24&reponame=main","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ruby@3.0.3-r0%3Farch=armv7&distroversion=v3.24&reponame=main"}],"aliases":["CVE-2021-41817","GHSA-qg54-694p-wgpp"],"risk_score":null,"exploitability":null,"weighted_severity":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-zf4z-vjzg-m3dk"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/ruby@3.0.3-r0%3Farch=armv7&distroversion=v3.24&reponame=main"}