{"action":"Upgrade github.com/ulikunitz/xz to 0.5.8 or later.","affected":[{"fixed":"0.5.8","introduced":"0"}],"component":"github.com/ulikunitz/xz","cve_ids":["CVE-2021-29482"],"ecosystem":"Go","epss":0.01438,"exploited":false,"fixed_versions":["0.5.8"],"ghsa_id":"GHSA-25xm-hr59-7c27","id":"tcs_01M5KFT2VKGJVJF0Q1Y1ARB2W2","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2020-0016","https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b","https://github.com/ulikunitz/xz/issues/35"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2020-0016","url":"https://osv.dev/vulnerability/GO-2020-0016"}],"summary":"Infinite loop in github.com/ulikunitz/xz"}