{"action":"Upgrade github.com/git-lfs/git-lfs to 2.1.1-0.20170519163204-f913f5f9c7c6+incompatible or later.","affected":[{"fixed":"2.1.1-0.20170519163204-f913f5f9c7c6+incompatible","introduced":"0"}],"component":"github.com/git-lfs/git-lfs","cve_ids":["CVE-2017-17831"],"ecosystem":"Go","epss":0.03677,"exploited":false,"fixed_versions":["2.1.1-0.20170519163204-f913f5f9c7c6+incompatible"],"ghsa_id":"GHSA-w4xh-w33p-4v29","id":"tcs_01M5KFTC3TQE9JXYF8ZR0VVGHX","modified_at":"2024-06-03T20:51:31Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2021-0073","https://github.com/git-lfs/git-lfs/pull/2241","https://github.com/git-lfs/git-lfs/commit/f913f5f9c7c6d1301785fdf9884a2942d59cdf19","http://blog.recurity-labs.com/2017-08-10/scm-vulns","https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-01-24-942834324.html"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2021-0073","url":"https://osv.dev/vulnerability/GO-2021-0073"}],"summary":"Arbitrary command execution in github.com/git-lfs/git-lfs"}