{"action":"Upgrade github.com/concourse/concourse to 0.0.0-20200730151558-b00d1c8d8576 or later.","affected":[{"fixed":"6.4.1","introduced":"6.4.0"},{"fixed":"6.3.1","introduced":"1.6.1"},{"introduced":"0"},{"fixed":"1.6.1-0.20200730151558-b00d1c8d8576","introduced":"0.0.0"}],"component":"github.com/concourse/concourse","cve_ids":["CVE-2020-5415"],"ecosystem":"Go","epss":0.01217,"exploited":false,"fixed_versions":["6.4.1","6.3.1","0.0.0-20200730151558-b00d1c8d8576","1.6.1-0.20200730151558-b00d1c8d8576"],"ghsa_id":"GHSA-627p-rr78-99rj","id":"tcs_01M5KEZ3CP64TFHME7ZTGGP8CY","modified_at":"2026-07-08T06:00:52.559476287Z","published_at":"2021-12-20T17:56:03Z","references":["https://osv.dev/vulnerability/GHSA-627p-rr78-99rj","https://github.com/concourse/concourse/security/advisories/GHSA-627p-rr78-99rj","https://nvd.nist.gov/vuln/detail/CVE-2020-5415","https://tanzu.vmware.com/security/cve-2020-5415"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-627p-rr78-99rj","url":"https://osv.dev/vulnerability/GHSA-627p-rr78-99rj"}],"summary":"GitLab auth uses full name instead of username as user ID, allowing impersonation"}