{"action":"Upgrade gitaly to 13.3.9 or later.","affected":[{"fixed":"13.3.9","introduced":"1.79.0"},{"fixed":"13.4.5","introduced":"13.4"},{"fixed":"13.5.2","introduced":"13.5"}],"component":"gitaly","cve_ids":["CVE-2020-13353"],"ecosystem":"RubyGems","epss":0.00277,"exploited":false,"fixed_versions":["13.3.9","13.4.5","13.5.2"],"ghsa_id":"GHSA-mmmm-chjf-jmvw","id":"tcs_01M5KEM97FJRMC3EF419VRBY9Y","modified_at":"2023-11-08T04:02:18.736320Z","published_at":"2022-05-24T17:34:24Z","references":["https://osv.dev/vulnerability/GHSA-mmmm-chjf-jmvw","https://nvd.nist.gov/vuln/detail/CVE-2020-13353","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/gitaly/CVE-2020-13353.yml","https://gitlab.com/gitlab-org/cves/-/blob/master/2020/CVE-2020-13353.json","https://gitlab.com/gitlab-org/gitaly","https://gitlab.com/gitlab-org/gitaly/-/issues/2882"],"severity":{"label":"low","score":3.2},"sources":[{"source":"osv","source_id":"GHSA-mmmm-chjf-jmvw","url":"https://osv.dev/vulnerability/GHSA-mmmm-chjf-jmvw"}],"summary":"Gitaly Insufficient Session Expiration vulnerability"}