{"action":"Upgrade github.com/loft-sh/devspace to 4.14.0 or later.","affected":[{"fixed":"4.14.0","introduced":"0"}],"component":"github.com/loft-sh/devspace","cve_ids":["CVE-2020-15391"],"ecosystem":"Go","epss":0.02716,"exploited":false,"fixed_versions":["4.14.0"],"ghsa_id":"GHSA-6h8c-gw33-cjm2","id":"tcs_01M5KF07QZPVD7GQ6RVPGNTFZ4","modified_at":"2023-11-08T04:02:36.931939Z","published_at":"2022-05-24T17:24:14Z","references":["https://osv.dev/vulnerability/GHSA-6h8c-gw33-cjm2","https://nvd.nist.gov/vuln/detail/CVE-2020-15391","https://github.com/devspace-sh/devspace/issues/1128","https://github.com/devspace-cloud/devspace/releases/tag/v4.14.0","https://github.com/devspace-sh/devspace"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6h8c-gw33-cjm2","url":"https://osv.dev/vulnerability/GHSA-6h8c-gw33-cjm2"}],"summary":"DevSpace vulnerable to remote code execution"}