{"action":"Upgrade github.com/ipfs/go-ipfs to 0.12.1 or later.","affected":[{"fixed":"0.12.1","introduced":"0.11.0"}],"component":"github.com/ipfs/go-ipfs","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.12.1"],"ghsa_id":"GHSA-fx5p-f64h-93xc","id":"tcs_01M5KFA0K71DC7KERRKC2AHX1Y","modified_at":"2024-08-21T15:27:05.459014Z","published_at":"2022-04-04T21:23:55Z","references":["https://osv.dev/vulnerability/GHSA-fx5p-f64h-93xc","https://github.com/ipfs/go-ipfs/security/advisories/GHSA-fx5p-f64h-93xc","https://github.com/ipfs/go-ipfs/pull/8773","https://github.com/ipfs/go-ipfs/commit/816a128aaf963d72c4930852ce32b9a4e31924a1","https://github.com/ipfs/go-ipfs","https://github.com/ipfs/go-ipfs/releases/tag/v0.12.1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-fx5p-f64h-93xc","url":"https://osv.dev/vulnerability/GHSA-fx5p-f64h-93xc"}],"summary":"Opened exploitable ports in default docker-compose.yaml in go-ipfs"}