Added cvss_v3 field to 1 advisory

rubysec · Nov 28, 2023 · a02ccb9 · a02ccb9
1 parent 09cecd9
commit a02ccb9
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/gems/bootstrap-wysihtml5-rails/CVE-2019-19919.yml b/gems/bootstrap-wysihtml5-rails/CVE-2019-19919.yml
@@ -16,5 +16,6 @@ description: |
   Versions of handlebars prior to 3.0.8 or 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution.
   Templates may alter an Objects' __proto__ and __defineGetter__ properties, which may allow an attacker to execute
   arbitrary code through crafted payloads.
+cvss_v3: 9.8
 unaffected_versions:
   - "< 0.3.3.5"