{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/10440?format=json","vulnerability_id":"VCID-5g9u-91h5-8yaz","summary":"Command injection vulnerability\nThe `unpack_zip` function in `archive_unpacker.rb` in the sprout gem for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename or path.","aliases":[{"alias":"CVE-2013-6421"},{"alias":"GHSA-229r-pqp6-8w6g"},{"alias":"OSV-100598"}],"fixed_packages":[],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/50585?format=json","purl":"pkg:gem/sprout@0.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/88443?format=json","purl":"pkg:gem/sprout@0.7.153","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.153"},{"url":"http://public2.vulnerablecode.io/api/packages/88444?format=json","purl":"pkg:gem/sprout@0.7.156","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.156"},{"url":"http://public2.vulnerablecode.io/api/packages/88445?format=json","purl":"pkg:gem/sprout@0.7.157","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.157"},{"url":"http://public2.vulnerablecode.io/api/packages/88446?format=json","purl":"pkg:gem/sprout@0.7.159","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.159"},{"url":"http://public2.vulnerablecode.io/api/packages/88447?format=json","purl":"pkg:gem/sprout@0.7.162","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.162"},{"url":"http://public2.vulnerablecode.io/api/packages/88448?format=json","purl":"pkg:gem/sprout@0.7.163","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.163"},{"url":"http://public2.vulnerablecode.io/api/packages/88449?format=json","purl":"pkg:gem/sprout@0.7.165","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.165"},{"url":"http://public2.vulnerablecode.io/api/packages/88450?format=json","purl":"pkg:gem/sprout@0.7.167","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.167"},{"url":"http://public2.vulnerablecode.io/api/packages/88451?format=json","purl":"pkg:gem/sprout@0.7.169","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.169"},{"url":"http://public2.vulnerablecode.io/api/packages/88452?format=json","purl":"pkg:gem/sprout@0.7.170","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.170"},{"url":"http://public2.vulnerablecode.io/api/packages/88453?format=json","purl":"pkg:gem/sprout@0.7.171","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.171"},{"url":"http://public2.vulnerablecode.io/api/packages/88454?format=json","purl":"pkg:gem/sprout@0.7.182","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.182"},{"url":"http://public2.vulnerablecode.io/api/packages/88455?format=json","purl":"pkg:gem/sprout@0.7.183","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.183"},{"url":"http://public2.vulnerablecode.io/api/packages/88456?format=json","purl":"pkg:gem/sprout@0.7.191","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.191"},{"url":"http://public2.vulnerablecode.io/api/packages/88457?format=json","purl":"pkg:gem/sprout@0.7.192","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.192"},{"url":"http://public2.vulnerablecode.io/api/packages/88458?format=json","purl":"pkg:gem/sprout@0.7.193","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.193"},{"url":"http://public2.vulnerablecode.io/api/packages/88459?format=json","purl":"pkg:gem/sprout@0.7.196","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.196"},{"url":"http://public2.vulnerablecode.io/api/packages/88460?format=json","purl":"pkg:gem/sprout@0.7.197","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.197"},{"url":"http://public2.vulnerablecode.io/api/packages/88461?format=json","purl":"pkg:gem/sprout@0.7.198","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.198"},{"url":"http://public2.vulnerablecode.io/api/packages/88462?format=json","purl":"pkg:gem/sprout@0.7.201","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.201"},{"url":"http://public2.vulnerablecode.io/api/packages/88463?format=json","purl":"pkg:gem/sprout@0.7.203","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.203"},{"url":"http://public2.vulnerablecode.io/api/packages/88464?format=json","purl":"pkg:gem/sprout@0.7.204","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.204"},{"url":"http://public2.vulnerablecode.io/api/packages/88465?format=json","purl":"pkg:gem/sprout@0.7.205","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.205"},{"url":"http://public2.vulnerablecode.io/api/packages/88466?format=json","purl":"pkg:gem/sprout@0.7.206","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.206"},{"url":"http://public2.vulnerablecode.io/api/packages/88467?format=json","purl":"pkg:gem/sprout@0.7.210","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.210"},{"url":"http://public2.vulnerablecode.io/api/packages/88468?format=json","purl":"pkg:gem/sprout@0.7.211","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.211"},{"url":"http://public2.vulnerablecode.io/api/packages/88469?format=json","purl":"pkg:gem/sprout@0.7.212","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.212"},{"url":"http://public2.vulnerablecode.io/api/packages/88470?format=json","purl":"pkg:gem/sprout@0.7.213","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.213"},{"url":"http://public2.vulnerablecode.io/api/packages/88471?format=json","purl":"pkg:gem/sprout@0.7.215","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.215"},{"url":"http://public2.vulnerablecode.io/api/packages/88472?format=json","purl":"pkg:gem/sprout@0.7.217","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.217"},{"url":"http://public2.vulnerablecode.io/api/packages/88473?format=json","purl":"pkg:gem/sprout@0.7.218","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.218"},{"url":"http://public2.vulnerablecode.io/api/packages/88474?format=json","purl":"pkg:gem/sprout@0.7.219","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.219"},{"url":"http://public2.vulnerablecode.io/api/packages/88475?format=json","purl":"pkg:gem/sprout@0.7.220","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.220"},{"url":"http://public2.vulnerablecode.io/api/packages/88476?format=json","purl":"pkg:gem/sprout@0.7.221","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.221"},{"url":"http://public2.vulnerablecode.io/api/packages/88477?format=json","purl":"pkg:gem/sprout@0.7.223","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.223"},{"url":"http://public2.vulnerablecode.io/api/packages/88478?format=json","purl":"pkg:gem/sprout@0.7.224","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.224"},{"url":"http://public2.vulnerablecode.io/api/packages/88479?format=json","purl":"pkg:gem/sprout@0.7.226","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.226"},{"url":"http://public2.vulnerablecode.io/api/packages/88480?format=json","purl":"pkg:gem/sprout@0.7.227","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.227"},{"url":"http://public2.vulnerablecode.io/api/packages/88481?format=json","purl":"pkg:gem/sprout@0.7.228","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.228"},{"url":"http://public2.vulnerablecode.io/api/packages/88482?format=json","purl":"pkg:gem/sprout@0.7.229","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.229"},{"url":"http://public2.vulnerablecode.io/api/packages/88483?format=json","purl":"pkg:gem/sprout@0.7.233","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.233"},{"url":"http://public2.vulnerablecode.io/api/packages/88484?format=json","purl":"pkg:gem/sprout@0.7.234","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.234"},{"url":"http://public2.vulnerablecode.io/api/packages/88485?format=json","purl":"pkg:gem/sprout@0.7.235","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.235"},{"url":"http://public2.vulnerablecode.io/api/packages/88486?format=json","purl":"pkg:gem/sprout@0.7.236","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.236"},{"url":"http://public2.vulnerablecode.io/api/packages/88487?format=json","purl":"pkg:gem/sprout@0.7.237","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.237"},{"url":"http://public2.vulnerablecode.io/api/packages/88488?format=json","purl":"pkg:gem/sprout@0.7.239","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.239"},{"url":"http://public2.vulnerablecode.io/api/packages/88489?format=json","purl":"pkg:gem/sprout@0.7.240","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.240"},{"url":"http://public2.vulnerablecode.io/api/packages/88490?format=json","purl":"pkg:gem/sprout@0.7.241","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.241"},{"url":"http://public2.vulnerablecode.io/api/packages/88491?format=json","purl":"pkg:gem/sprout@0.7.244","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.244"},{"url":"http://public2.vulnerablecode.io/api/packages/88492?format=json","purl":"pkg:gem/sprout@0.7.245","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.245"},{"url":"http://public2.vulnerablecode.io/api/packages/73715?format=json","purl":"pkg:gem/sprout@0.7.246","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@0.7.246"},{"url":"http://public2.vulnerablecode.io/api/packages/88493?format=json","purl":"pkg:gem/sprout@1.0.0.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.0.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88501?format=json","purl":"pkg:gem/sprout@1.0.11.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.11.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88502?format=json","purl":"pkg:gem/sprout@1.0.13.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.13.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88503?format=json","purl":"pkg:gem/sprout@1.0.14.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.14.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88504?format=json","purl":"pkg:gem/sprout@1.0.15.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.15.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88505?format=json","purl":"pkg:gem/sprout@1.0.16.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.16.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88506?format=json","purl":"pkg:gem/sprout@1.0.17.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.17.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88507?format=json","purl":"pkg:gem/sprout@1.0.18.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.18.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88508?format=json","purl":"pkg:gem/sprout@1.0.19.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.19.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88494?format=json","purl":"pkg:gem/sprout@1.0.1.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.1.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88509?format=json","purl":"pkg:gem/sprout@1.0.20.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.20.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88510?format=json","purl":"pkg:gem/sprout@1.0.22.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.22.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88511?format=json","purl":"pkg:gem/sprout@1.0.23.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.23.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88512?format=json","purl":"pkg:gem/sprout@1.0.24.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.24.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88513?format=json","purl":"pkg:gem/sprout@1.0.25.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.25.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88514?format=json","purl":"pkg:gem/sprout@1.0.26.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.26.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88515?format=json","purl":"pkg:gem/sprout@1.0.29.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.29.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88495?format=json","purl":"pkg:gem/sprout@1.0.2.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.2.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88516?format=json","purl":"pkg:gem/sprout@1.0.31.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.31.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88517?format=json","purl":"pkg:gem/sprout@1.0.32.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.32.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88518?format=json","purl":"pkg:gem/sprout@1.0.35.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.35.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88496?format=json","purl":"pkg:gem/sprout@1.0.3.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.3.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88497?format=json","purl":"pkg:gem/sprout@1.0.4.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.4.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88498?format=json","purl":"pkg:gem/sprout@1.0.5.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.5.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88499?format=json","purl":"pkg:gem/sprout@1.0.8.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.8.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88500?format=json","purl":"pkg:gem/sprout@1.0.9.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.0.9.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88524?format=json","purl":"pkg:gem/sprout@1.1.10.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.10.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88525?format=json","purl":"pkg:gem/sprout@1.1.11.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.11.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88526?format=json","purl":"pkg:gem/sprout@1.1.13.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.13.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88527?format=json","purl":"pkg:gem/sprout@1.1.14.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.14.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88528?format=json","purl":"pkg:gem/sprout@1.1.15.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.15.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88529?format=json","purl":"pkg:gem/sprout@1.1.16.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.16.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88530?format=json","purl":"pkg:gem/sprout@1.1.17.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.17.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88531?format=json","purl":"pkg:gem/sprout@1.1.18.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.18.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88519?format=json","purl":"pkg:gem/sprout@1.1.2.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.2.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88520?format=json","purl":"pkg:gem/sprout@1.1.3.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.3.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88521?format=json","purl":"pkg:gem/sprout@1.1.4.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.4.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88522?format=json","purl":"pkg:gem/sprout@1.1.5.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.5.pre"},{"url":"http://public2.vulnerablecode.io/api/packages/88523?format=json","purl":"pkg:gem/sprout@1.1.7.pre","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-5g9u-91h5-8yaz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:gem/sprout@1.1.7.pre"}],"references":[{"reference_url":"http://archives.neohapsis.com/archives/bugtraq/2013-12/0077.html","reference_id":"","reference_type":"","scores":[],"url":"http://archives.neohapsis.com/archives/bugtraq/2013-12/0077.html"},{"reference_url":"http://cxsecurity.com/issue/WLB-2013120023","reference_id":"","reference_type":"","scores":[],"url":"http://cxsecurity.com/issue/WLB-2013120023"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2013-6421","reference_id":"","reference_type":"","scores":[{"value":"0.01228","scoring_system":"epss","scoring_elements":"0.79464","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2013-6421"},{"reference_url":"https://github.com/lukebayes/project-sprouts/blob/e8e6c60438cd1a4d598645760b00ea005eb1cc2c/lib/sprout/archive_unpacker.rb#L90","reference_id":"","reference_type":"","scores":[],"url":"https://github.com/lukebayes/project-sprouts/blob/e8e6c60438cd1a4d598645760b00ea005eb1cc2c/lib/sprout/archive_unpacker.rb#L90"},{"reference_url":"http://vapid.dhs.org/advisories/sprout-0.7.246-command-inj.html","reference_id":"","reference_type":"","scores":[],"url":"http://vapid.dhs.org/advisories/sprout-0.7.246-command-inj.html"},{"reference_url":"http://www.openwall.com/lists/oss-security/2013/12/03/1","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2013/12/03/1"},{"reference_url":"http://www.openwall.com/lists/oss-security/2013/12/03/6","reference_id":"","reference_type":"","scores":[],"url":"http://www.openwall.com/lists/oss-security/2013/12/03/6"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6421","reference_id":"CVE-2013-6421","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-6421"},{"reference_url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sprout/CVE-2013-6421.yml","reference_id":"CVE-2013-6421.YML","reference_type":"","scores":[],"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sprout/CVE-2013-6421.yml"},{"reference_url":"https://github.com/advisories/GHSA-229r-pqp6-8w6g","reference_id":"GHSA-229r-pqp6-8w6g","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-229r-pqp6-8w6g"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":94,"name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment."}],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":null,"weighted_severity":null,"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5g9u-91h5-8yaz"}