{"action":"Upgrade github.com/git-lfs/git-lfs to 1.5.1-0.20210113180018-fc664697ed2c or later.","affected":[{"fixed":"1.5.1-0.20210113180018-fc664697ed2c","introduced":"0"}],"component":"github.com/git-lfs/git-lfs","cve_ids":["CVE-2021-21237"],"ecosystem":"Go","epss":0.00453,"exploited":false,"fixed_versions":["1.5.1-0.20210113180018-fc664697ed2c"],"ghsa_id":"GHSA-cx3w-xqmc-84g5","id":"tcs_01M5KFTFS38P4MG0DS3SEXCTE4","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2021-0098","https://github.com/git-lfs/git-lfs/commit/fc664697ed2c2081ee9633010de0a7f9debea72a"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2021-0098","url":"https://osv.dev/vulnerability/GO-2021-0098"}],"summary":"Arbitrary code execution on Windows in github.com/git-lfs/git-lfs"}