{"action":"Upgrade webbrowser to 0.8.3 or later.","affected":[{"fixed":"0.8.3","introduced":"0"}],"component":"webbrowser","cve_ids":["CVE-2022-45299"],"ecosystem":"crates.io","epss":0.01363,"exploited":false,"fixed_versions":["0.8.3"],"ghsa_id":"GHSA-m589-mv4q-p7rj","id":"tcs_01M5KF1GARAM0V90JDZRM5KPA4","modified_at":"2023-11-08T04:10:51.306650Z","published_at":"2023-01-13T21:30:26Z","references":["https://osv.dev/vulnerability/GHSA-m589-mv4q-p7rj","https://nvd.nist.gov/vuln/detail/CVE-2022-45299","https://github.com/amodm/webbrowser-rs/commit/431b5139e274b7e456bea27e768aaa121b97be4c","https://github.com/amodm/webbrowser-rs","https://github.com/amodm/webbrowser-rs/releases/tag/v0.8.3","https://github.com/offalltn/CVE-2022-45299"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m589-mv4q-p7rj","url":"https://osv.dev/vulnerability/GHSA-m589-mv4q-p7rj"}],"summary":"webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL"}