{"action":"Upgrade github.com/sjqzhang/go-fastdfs to 1.4.5-0.20230408141131-61cbff5124c6 or later.","affected":[{"fixed":"1.4.5-0.20230408141131-61cbff5124c6","introduced":"0"}],"component":"github.com/sjqzhang/go-fastdfs","cve_ids":["CVE-2023-1800"],"ecosystem":"Go","epss":0.03553,"exploited":false,"fixed_versions":["1.4.5-0.20230408141131-61cbff5124c6"],"ghsa_id":"GHSA-xq3x-grrj-fj6x","id":"tcs_01M5KFSK91Z2SJ6ZG8WB3DA64N","modified_at":"2024-05-20T21:50:28Z","published_at":"2023-04-02T12:30:16Z","references":["https://osv.dev/vulnerability/GHSA-xq3x-grrj-fj6x","https://nvd.nist.gov/vuln/detail/CVE-2023-1800","https://github.com/sjqzhang/go-fastdfs/commit/61cbff5124c61e292994099372b11c06cdb5b80b","https://github.com/sjqzhang/go-fastdfs","https://github.com/yangyanglo/ForCVE/blob/93a16663cd32a36d37d8a0f0102e1592254d0279/2023-0x05.md","https://github.com/yangyanglo/ForCVE/blob/main/2023-0x05.md","https://vuldb.com/?ctiid.224768","https://vuldb.com/?id.224768"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xq3x-grrj-fj6x","url":"https://osv.dev/vulnerability/GHSA-xq3x-grrj-fj6x"}],"summary":"sjqzhang go-fastdfs vulnerable to path traversal"}