{"action":"Upgrade git2 to 0.16.1 or later.","affected":[{"fixed":"0.16.1","introduced":"0"}],"component":"git2","cve_ids":["CVE-2023-22742"],"ecosystem":"crates.io","epss":0.00607,"exploited":false,"fixed_versions":["0.16.1"],"ghsa_id":"GHSA-m4ch-rfv5-x5g3","id":"tcs_01M5KF1EZ4K30Y9R22T38F6JP1","modified_at":"2026-10-14T17:07:22Z","published_at":"2023-01-20T23:36:41Z","references":["https://osv.dev/vulnerability/GHSA-m4ch-rfv5-x5g3","https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq","https://github.com/rust-lang/git2-rs/security/advisories/GHSA-m4ch-rfv5-x5g3","https://nvd.nist.gov/vuln/detail/CVE-2023-22742","https://github.com/rust-lang/git2-rs/commit/87934f87d36753ed702792ec063be7246444a8e1","https://github.com/rust-lang/git2-rs","https://rustsec.org/advisories/RUSTSEC-2023-0003.html"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-m4ch-rfv5-x5g3#crates.io/git2","url":"https://osv.dev/vulnerability/GHSA-m4ch-rfv5-x5g3"}],"summary":"git2-rs fails to verify SSH keys by default"}