{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.8.90"}],"component":"github.com/ansible-semaphore/semaphore","cve_ids":["CVE-2023-39059"],"ecosystem":"Go","epss":0.01731,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-3r32-cp7v-5wq4","id":"tcs_01M5KEV8T7KP52N6HK55SNP6E4","modified_at":"2024-10-02T18:37:59Z","published_at":"2023-08-29T00:32:03Z","references":["https://osv.dev/vulnerability/GHSA-3r32-cp7v-5wq4","https://nvd.nist.gov/vuln/detail/CVE-2023-39059","https://gist.github.com/Alevsk/1757da24c5fb8db735d392fd4146ca3a","https://github.com/ansible-semaphore/semaphore","https://www.alevsk.com/2023/07/a-quick-story-of-security-pitfalls-with-execcommand-in-software-integrations"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-3r32-cp7v-5wq4","url":"https://osv.dev/vulnerability/GHSA-3r32-cp7v-5wq4"}],"summary":"Code injection in ansible semaphore"}