{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.4"}],"component":"pleaser","cve_ids":["CVE-2023-46277"],"ecosystem":"crates.io","epss":0.00308,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cgf8-h3fp-h956","id":"tcs_01M5KEWWQFKGY5NG2K8GE29DDJ","modified_at":"2024-09-12T18:41:42Z","published_at":"2023-10-20T06:30:19Z","references":["https://osv.dev/vulnerability/GHSA-cgf8-h3fp-h956","https://nvd.nist.gov/vuln/detail/CVE-2023-46277","https://github.com/rustsec/advisory-db/pull/1798","https://gitlab.com/edneville/please","https://gitlab.com/edneville/please/-/issues/13","https://gitlab.com/edneville/please/-/merge_requests/69#note_1594254575","https://rustsec.org/advisories/RUSTSEC-2023-0066.html"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-cgf8-h3fp-h956","url":"https://osv.dev/vulnerability/GHSA-cgf8-h3fp-h956"}],"summary":"Pleaser privilege escalation vulnerability"}