{"action":"Upgrade ripgrep to 13.0.0 or later.","affected":[{"fixed":"13.0.0","introduced":"0"}],"component":"ripgrep","cve_ids":["CVE-2021-3013"],"ecosystem":"crates.io","epss":0.01934,"exploited":false,"fixed_versions":["13.0.0"],"ghsa_id":"GHSA-g4xg-fxmg-vcg5","id":"tcs_01M5KEXTF9WDGB6S3KZ3MHTPPX","modified_at":"2023-11-08T04:05:44.745722Z","published_at":"2021-08-05T19:31:55Z","references":["https://osv.dev/vulnerability/GHSA-g4xg-fxmg-vcg5","https://nvd.nist.gov/vuln/detail/CVE-2021-3013","https://github.com/BurntSushi/ripgrep/issues/1773","https://github.com/BurntSushi/ripgrep","https://github.com/BurntSushi/ripgrep/blob/e48a17e1891e1ea9dd06ba0e48d5fb140ca7c0c4/CHANGELOG.md","https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md","https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md#1300-2021-06-12","https://rustsec.org/advisories/RUSTSEC-2021-0071.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g4xg-fxmg-vcg5","url":"https://osv.dev/vulnerability/GHSA-g4xg-fxmg-vcg5"}],"summary":"OS command injection in ripgrep"}