{"action":"Upgrade github.com/hyperledger/fabric to 2.2.4 or later.","affected":[{"fixed":"2.3.3","introduced":"2.3.0"},{"fixed":"2.2.4","introduced":"0"}],"component":"github.com/hyperledger/fabric","cve_ids":["CVE-2021-43667"],"ecosystem":"Go","epss":0.01336,"exploited":false,"fixed_versions":["2.3.3","2.2.4"],"ghsa_id":"GHSA-vjj6-5m9f-wqjw","id":"tcs_01M5KFP9Z8PD92P2CB9KDQQXCY","modified_at":"2023-11-08T04:07:11.200758Z","published_at":"2022-05-25T19:23:25Z","references":["https://osv.dev/vulnerability/GHSA-vjj6-5m9f-wqjw","https://nvd.nist.gov/vuln/detail/CVE-2021-43667","https://github.com/hyperledger/fabric/pull/2838/commits/ebf94b10ecc86d3a91619b98befc52277b1e3474","https://github.com/hyperledger/fabric/pull/2844","https://jira.hyperledger.org/browse/FAB-18529"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vjj6-5m9f-wqjw","url":"https://osv.dev/vulnerability/GHSA-vjj6-5m9f-wqjw"}],"summary":"NULL Pointer Dereference in HyperLedger Fabric"}