{"action":"Upgrade github.com/gookit/goutil to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0"}],"component":"github.com/gookit/goutil","cve_ids":["CVE-2023-27475"],"ecosystem":"Go","epss":0.00849,"exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-fx2v-qfhr-4chv","id":"tcs_01M5KF9ZKHTKAF982YN5W9MKEC","modified_at":"2023-11-08T04:12:04.357925Z","published_at":"2023-03-07T20:37:09Z","references":["https://osv.dev/vulnerability/GHSA-fx2v-qfhr-4chv","https://github.com/gookit/goutil/security/advisories/GHSA-fx2v-qfhr-4chv","https://nvd.nist.gov/vuln/detail/CVE-2023-27475","https://github.com/gookit/goutil/commit/d7b94fede71f018f129f7d21feb58c895d28dadc","https://github.com/gookit/goutil","https://pkg.go.dev/vuln/GO-2023-1611","https://security.netapp.com/advisory/ntap-20230427-0003"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-fx2v-qfhr-4chv","url":"https://osv.dev/vulnerability/GHSA-fx2v-qfhr-4chv"}],"summary":"Goutil vulnerable to path traversal when unzipping files"}