{"action":"Upgrade grep-cli to 0.1.6 or later.","affected":[{"fixed":"0.1.6","introduced":"0"}],"component":"grep-cli","cve_ids":["CVE-2021-3013"],"ecosystem":"crates.io","epss":0.01934,"exploited":false,"fixed_versions":["0.1.6"],"ghsa_id":"GHSA-g4xg-fxmg-vcg5","id":"tcs_01M5KEXTNR7J3NZQE3VTW4F1G8","modified_at":"2023-11-08T04:05:44.745722Z","published_at":"2021-08-05T19:31:55Z","references":["https://osv.dev/vulnerability/GHSA-g4xg-fxmg-vcg5","https://nvd.nist.gov/vuln/detail/CVE-2021-3013","https://github.com/BurntSushi/ripgrep/issues/1773","https://github.com/BurntSushi/ripgrep","https://github.com/BurntSushi/ripgrep/blob/e48a17e1891e1ea9dd06ba0e48d5fb140ca7c0c4/CHANGELOG.md","https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md","https://github.com/BurntSushi/ripgrep/blob/master/CHANGELOG.md#1300-2021-06-12","https://rustsec.org/advisories/RUSTSEC-2021-0071.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g4xg-fxmg-vcg5#crates.io/grep-cli","url":"https://osv.dev/vulnerability/GHSA-g4xg-fxmg-vcg5"}],"summary":"OS command injection in ripgrep"}