{"items":[{"id":"CVE-2018-3777","published":"2018-08-03T20:00:00.000Z","updated":"2024-09-17T03:07:25.089Z","title":"Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.","severity":"CRITICAL","score":9.8,"vendor":"https://github.com/restforce","product":"restforce ruby gem","kev":false,"epss":0.01506,"kevAdded":null}]}