{"action":"Upgrade github.com/dhowden/tag to 0.0.0-20201120070457-d52dcb253c63 or later.","affected":[{"introduced":"0"}],"component":"github.com/dhowden/tag","cve_ids":["CVE-2020-29242","CVE-2020-29243","CVE-2020-29244","CVE-2020-29245"],"ecosystem":"Go","epss":0.01134,"exploited":false,"fixed_versions":["0.0.0-20201120070457-d52dcb253c63"],"ghsa_id":"GHSA-27mh-3343-6hg5","id":"tcs_01M5KFTFKN9VH9HXWRF347FTNV","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2021-0097","https://github.com/dhowden/tag/commit/d52dcb253c63a153632bfee5f269dd411dcd8e96","https://github.com/dhowden/tag/commit/a92213460e4838490ce3066ef11dc823cdc1740e","https://github.com/dhowden/tag/commit/4b595ed4fac79f467594aa92f8953f90f817116e","https://github.com/dhowden/tag/commit/6b18201aa5c5535511802ddfb4e4117686b4866d"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2021-0097","url":"https://osv.dev/vulnerability/GO-2021-0097"}],"summary":"Panic due to out-of-bounds read in github.com/dhowden/tag"}