← All advisories

High severity8.1NVD Advisory· Published Aug 5, 2020· Updated Jun 17, 2026

CVE-2020-16253

CVE-2020-16253

Description

The PgHero gem through 2.6.0 for Ruby allows CSRF.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
pgheroRubyGems	< 2.7.0	2.7.0

Affected products

3

Pghero Project/Pghero
cpe:2.3:a:pghero_project:pghero:*:*:*:*:*:ruby:*:*
Range: <=2.6.0
Ruby/PgHero gemdescription
ghsa-coords
pkg:gem/pghero
Range: < 2.7.0

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-v6fx-752r-ccp2ghsaADVISORY
github.com/ankane/pghero/issues/330nvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2020-16253ghsaADVISORY
github.com/ankane/pghero/commit/14b67b32fed19a30aaf9826ee72f2a29cda604e9ghsaWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/pghero/CVE-2020-16253.ymlghsaWEB

News mentions

0

No linked articles in our index yet.