{"action":"Upgrade github.com/gin-gonic/gin to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"0"}],"component":"github.com/gin-gonic/gin","cve_ids":["CVE-2020-36567"],"ecosystem":"Go","epss":0.01489,"exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-6vm3-jj99-7229","id":"tcs_01M5KF0X18RRC1869617K992ZX","modified_at":"2023-11-08T04:03:47.851512Z","published_at":"2022-12-27T21:30:20Z","references":["https://osv.dev/vulnerability/GHSA-6vm3-jj99-7229","https://nvd.nist.gov/vuln/detail/CVE-2020-36567","https://github.com/gin-gonic/gin/pull/2237","https://github.com/gin-gonic/gin/commit/a71af9c144f9579f6dbe945341c1df37aaf09c0d","https://github.com/gin-gonic/gin","https://pkg.go.dev/vuln/GO-2020-0001"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6vm3-jj99-7229","url":"https://osv.dev/vulnerability/GHSA-6vm3-jj99-7229"}],"summary":"Gin's default logger allows unsanitized input that can allow remote attackers to inject arbitrary log lines"}