{"action":"Upgrade git to 1.13.0 or later.","affected":[{"fixed":"1.13.0","introduced":"0"}],"component":"git","cve_ids":["CVE-2022-47318"],"ecosystem":"RubyGems","epss":0.01422,"exploited":false,"fixed_versions":["1.13.0"],"ghsa_id":"GHSA-pphf-gfrm-v32r","id":"tcs_01M5KEMNY7EQNXJXNP07H8J4W7","modified_at":"2024-02-19T05:28:03.923348Z","published_at":"2023-01-17T12:30:33Z","references":["https://osv.dev/vulnerability/GHSA-pphf-gfrm-v32r","https://nvd.nist.gov/vuln/detail/CVE-2022-47318","https://github.com/ruby-git/ruby-git/pull/602","https://github.com/ruby-git/ruby-git","https://jvn.jp/en/jp/JVN16765254/index.html","https://lists.debian.org/debian-lts-announce/2023/01/msg00043.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4KPFLSZPUM7APWVBRM5DCAY5OUVQBF4K"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-pphf-gfrm-v32r","url":"https://osv.dev/vulnerability/GHSA-pphf-gfrm-v32r"}],"summary":"Code injection in ruby git"}