{"action":"Upgrade kekbit to 0.3.4 or later.","affected":[{"fixed":"0.3.4","introduced":"0"}],"component":"kekbit","cve_ids":["CVE-2020-36449"],"ecosystem":"crates.io","epss":0.01249,"exploited":false,"fixed_versions":["0.3.4"],"ghsa_id":"GHSA-g83m-67wh-whpw","id":"tcs_01M5KEZTC468KNPSZHJVRHHC7Z","modified_at":"2023-11-08T04:03:45.521117Z","published_at":"2021-08-25T20:57:10Z","references":["https://osv.dev/vulnerability/GHSA-g83m-67wh-whpw","https://nvd.nist.gov/vuln/detail/CVE-2020-36449","https://github.com/motoras/kekbit/issues/34","https://github.com/motoras/kekbit","https://rustsec.org/advisories/RUSTSEC-2020-0129.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-g83m-67wh-whpw","url":"https://osv.dev/vulnerability/GHSA-g83m-67wh-whpw"}],"summary":"Command injection in kekbit"}