{"action":"Upgrade github.com/dhowden/tag to 0.0.0-20201120070457-d52dcb253c63 or later.","affected":[{"introduced":"0"}],"component":"github.com/dhowden/tag","cve_ids":["CVE-2020-29242","CVE-2020-29243","CVE-2020-29244","CVE-2020-29245"],"ecosystem":"Go","epss":0.01134,"exploited":false,"fixed_versions":["0.0.0-20201120070457-d52dcb253c63"],"ghsa_id":"GHSA-9wm7-rc47-g56m","id":"tcs_01M5KF6AE68FXBA4APE23MGY8B","modified_at":"2024-05-20T19:49:42Z","published_at":"2022-05-24T17:37:26Z","references":["https://osv.dev/vulnerability/GHSA-9wm7-rc47-g56m","https://nvd.nist.gov/vuln/detail/CVE-2020-29243","https://github.com/dhowden/tag/issues/80","https://github.com/dhowden/tag/commit/4b595ed4fac79f467594aa92f8953f90f817116e","https://github.com/dhowden/tag/commit/6b18201aa5c5535511802ddfb4e4117686b4866d","https://github.com/dhowden/tag/commit/a92213460e4838490ce3066ef11dc823cdc1740e","https://github.com/dhowden/tag/commit/d52dcb253c63a153632bfee5f269dd411dcd8e96","https://github.com/dhowden/tag","https://pkg.go.dev/vuln/GO-2021-0097"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-9wm7-rc47-g56m","url":"https://osv.dev/vulnerability/GHSA-9wm7-rc47-g56m"}],"summary":"dhowden tag panic due to out-of-bounds read"}