{"action":"Upgrade github.com/ipfs/go-ipfs to 0.13.1 or later.","affected":[{"fixed":"0.13.1","introduced":"0.5.0"}],"component":"github.com/ipfs/go-ipfs","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.13.1"],"ghsa_id":"GHSA-f2gr-7299-487h","id":"tcs_01M5KF851XT8JGVY6D2RAMDBR2","modified_at":"2022-07-06T20:06:56Z","published_at":"2022-07-06T20:06:56Z","references":["https://osv.dev/vulnerability/GHSA-f2gr-7299-487h","https://github.com/ipfs/go-ipfs/security/advisories/GHSA-f2gr-7299-487h","https://github.com/ipfs/go-ipfs"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-f2gr-7299-487h","url":"https://osv.dev/vulnerability/GHSA-f2gr-7299-487h"}],"summary":"DOS and excessive memory usage when passing untrusted user input to to dag import"}