{"action":"Upgrade github.com/google/fscrypt to 0.3.3 or later.","affected":[{"fixed":"0.3.3","introduced":"0"}],"component":"github.com/google/fscrypt","cve_ids":["CVE-2022-25328"],"ecosystem":"Go","epss":0.00202,"exploited":false,"fixed_versions":["0.3.3"],"ghsa_id":"GHSA-wxjg-p59j-6c92","id":"tcs_01M5KFRBPBVEQZGE82KVNM6PWD","modified_at":"2023-11-08T04:08:46.172309Z","published_at":"2022-02-26T00:00:44Z","references":["https://osv.dev/vulnerability/GHSA-wxjg-p59j-6c92","https://nvd.nist.gov/vuln/detail/CVE-2022-25328","https://github.com/google/fscrypt/pull/346","https://github.com/google/fscrypt"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-wxjg-p59j-6c92","url":"https://osv.dev/vulnerability/GHSA-wxjg-p59j-6c92"}],"summary":"Command injection in github.com/google/fscrypt"}