{"action":"Upgrade github.com/concourse/dex to 0.0.0-20200730150203-821b48abfd88 or later.","affected":[{"fixed":"6.4.1","introduced":"6.4.0"},{"fixed":"6.3.1","introduced":"0.0.0"},{"introduced":"0"}],"component":"github.com/concourse/dex","cve_ids":["CVE-2020-5415"],"ecosystem":"Go","epss":0.01217,"exploited":false,"fixed_versions":["6.4.1","6.3.1","0.0.0-20200730150203-821b48abfd88"],"ghsa_id":"GHSA-627p-rr78-99rj","id":"tcs_01M5KEZ3JX71KYE1NPQ36BCETW","modified_at":"2026-07-08T06:00:52.559476287Z","published_at":"2021-12-20T17:56:03Z","references":["https://osv.dev/vulnerability/GHSA-627p-rr78-99rj","https://github.com/concourse/concourse/security/advisories/GHSA-627p-rr78-99rj","https://nvd.nist.gov/vuln/detail/CVE-2020-5415","https://tanzu.vmware.com/security/cve-2020-5415"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-627p-rr78-99rj#Go/github.com/concourse/dex","url":"https://osv.dev/vulnerability/GHSA-627p-rr78-99rj"}],"summary":"GitLab auth uses full name instead of username as user ID, allowing impersonation"}