{"action":"Upgrade github.com/dhowden/tag to 0.0.0-20201120070457-d52dcb253c63 or later.","affected":[{"introduced":"0"}],"component":"github.com/dhowden/tag","cve_ids":["CVE-2020-29242","CVE-2020-29243","CVE-2020-29244","CVE-2020-29245"],"ecosystem":"Go","epss":0.01134,"exploited":false,"fixed_versions":["0.0.0-20201120070457-d52dcb253c63"],"ghsa_id":"GHSA-wg79-2cgp-qrjm","id":"tcs_01M5KFQQRA9JW2YYWE9RJ3BRT5","modified_at":"2024-05-20T19:54:14Z","published_at":"2022-05-24T17:37:27Z","references":["https://osv.dev/vulnerability/GHSA-wg79-2cgp-qrjm","https://nvd.nist.gov/vuln/detail/CVE-2020-29245","https://github.com/dhowden/tag/issues/78","https://github.com/dhowden/tag/commit/4b595ed4fac79f467594aa92f8953f90f817116e","https://github.com/dhowden/tag/commit/6b18201aa5c5535511802ddfb4e4117686b4866d","https://github.com/dhowden/tag/commit/a92213460e4838490ce3066ef11dc823cdc1740e","https://github.com/dhowden/tag/commit/d52dcb253c63a153632bfee5f269dd411dcd8e96","https://github.com/dhowden/tag","https://pkg.go.dev/vuln/GO-2021-0097"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-wg79-2cgp-qrjm","url":"https://osv.dev/vulnerability/GHSA-wg79-2cgp-qrjm"}],"summary":"dhowden tag panic due to out-of-bounds read"}