{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.4.4"}],"component":"git-url-parse","cve_ids":["CVE-2023-33290"],"ecosystem":"crates.io","epss":0.00758,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qfh9-8p57-mjjj","id":"tcs_01M5KF2JAGD43ZVDAN8P49YAAB","modified_at":"2023-11-08T04:12:40.550704Z","published_at":"2023-06-12T15:30:28Z","references":["https://osv.dev/vulnerability/GHSA-qfh9-8p57-mjjj","https://nvd.nist.gov/vuln/detail/CVE-2023-33290","https://github.com/tjtelan/git-url-parse-rs/issues/51","https://github.com/tjtelan/git-url-parse-rs","https://github.com/tjtelan/git-url-parse-rs/blob/main/src/lib.rs#L396"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-qfh9-8p57-mjjj","url":"https://osv.dev/vulnerability/GHSA-qfh9-8p57-mjjj"}],"summary":"git-url-parse crate vulnerable to Regular Expression Denial of Service"}