{"action":"Upgrade libgit2-sys to 0.16.2 or later.","affected":[{"fixed":"0.16.2","introduced":"0.0.0-0"}],"component":"libgit2-sys","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.16.2"],"ghsa_id":"GHSA-22q8-ghmq-63vf","id":"tcs_01M5KF91K45HXA1WT6TJW3SJ8M","modified_at":"2026-02-04T03:46:03.412096Z","published_at":"2024-02-06T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2024-0013","https://crates.io/crates/libgit2-sys","https://rustsec.org/advisories/RUSTSEC-2024-0013.html","https://github.com/rust-lang/git2-rs/pull/1017","https://github.com/libgit2/libgit2/releases/tag/v1.7.2"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"RUSTSEC-2024-0013","url":"https://osv.dev/vulnerability/RUSTSEC-2024-0013"}],"summary":"Memory corruption, denial of service, and arbitrary code execution in libgit2"}