{"action":"Upgrade grep-cli to 0.1.6 or later.","affected":[{"fixed":"0.1.6","introduced":"0.0.0-0"}],"component":"grep-cli","cve_ids":["CVE-2021-3013"],"ecosystem":"crates.io","epss":0.01934,"exploited":false,"fixed_versions":["0.1.6"],"ghsa_id":"GHSA-g4xg-fxmg-vcg5","id":"tcs_01M5KF72QK3CZ4GWD2JT8EXEH9","modified_at":"2023-11-08T04:05:44.745722Z","published_at":"2021-06-12T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2021-0071","https://crates.io/crates/grep-cli","https://rustsec.org/advisories/RUSTSEC-2021-0071.html","https://github.com/BurntSushi/ripgrep/issues/1773"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"RUSTSEC-2021-0071","url":"https://osv.dev/vulnerability/RUSTSEC-2021-0071"}],"summary":"`grep-cli` may run arbitrary executables on Windows"}