{"action":"Upgrade github.com/apache/trafficcontrol to 5.1.3 or later.","affected":[{"fixed":"5.1.3","introduced":"0"}],"component":"github.com/apache/trafficcontrol","cve_ids":["CVE-2021-42009"],"ecosystem":"Go","epss":0.02824,"exploited":false,"fixed_versions":["5.1.3"],"ghsa_id":"GHSA-gw97-f6h8-gm94","id":"tcs_01M5KFBH7AJA10M79RM56G0XRH","modified_at":"2024-08-21T15:41:38.754243Z","published_at":"2021-10-13T18:55:04Z","references":["https://osv.dev/vulnerability/GHSA-gw97-f6h8-gm94","https://nvd.nist.gov/vuln/detail/CVE-2021-42009","https://github.com/apache/trafficcontrol","https://lists.apache.org/thread.html/r78d471d8a4fd268a4c5ae6c47327c09d9d4b4467c31da2c97422febb@%3Cdev.trafficcontrol.apache.org%3E","https://lists.apache.org/thread.html/r7dfa9a89b39d06caeeeb7b5cdc41b3493a9b86cc6cfa059d3f349d87@%3Cannounce.apache.org%3E","https://lists.apache.org/thread.html/re384fd0f44c6d230f31376153c6e8b59e4a669f927c1533d06d702af%40%3Cdev.trafficcontrol.apache.org%3E","https://lists.apache.org/thread.html/rf0481b9e38ece1ece458d3ce7b2d671df819e3555597f31fc34f084e%40%3Ccommits.trafficcontrol.apache.org%3E","http://www.openwall.com/lists/oss-security/2021/10/12/1"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-gw97-f6h8-gm94","url":"https://osv.dev/vulnerability/GHSA-gw97-f6h8-gm94"}],"summary":"Email relay in Apache Traffic Control"}