diff --git a/advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json b/advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json index cef779e9c1e..1b5e0c7f3bd 100644 --- a/advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json +++ b/advisories/github-reviewed/2017/10/GHSA-q86f-fmqf-qrf6/GHSA-q86f-fmqf-qrf6.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-q86f-fmqf-qrf6", - "modified": "2023-01-23T21:32:22Z", + "modified": "2023-09-05T21:08:32Z", "published": "2017-10-24T18:33:36Z", "aliases": [ "CVE-2015-9097" ], - "summary": "mail CRLF Injection vulnerability", + "summary": "Mail Gem CRLF Injection vulnerability", "details": "The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.", "severity": [ { @@ -20,6 +20,11 @@ "ecosystem": "RubyGems", "name": "mail" }, + "ecosystem_specific": { + "affected_functions": [ + "" + ] + }, "ranges": [ { "type": "ECOSYSTEM",