{"action":"Upgrade github.com/gin-gonic/gin to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"1.3.1-0.20190301021747-ccb9e902956d"}],"component":"github.com/gin-gonic/gin","cve_ids":["CVE-2023-29401"],"ecosystem":"Go","epss":0.00482,"exploited":false,"fixed_versions":["1.9.1"],"ghsa_id":"GHSA-2c4m-59x9-fr2g","id":"tcs_01M5KFZ47TMERY020AW3EWAY28","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-05-11T18:59:56Z","references":["https://osv.dev/vulnerability/GO-2023-1737","https://github.com/gin-gonic/gin/issues/3555","https://github.com/gin-gonic/gin/pull/3556","https://github.com/gin-gonic/gin/releases/tag/v1.9.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1737","url":"https://osv.dev/vulnerability/GO-2023-1737"}],"summary":"Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin"}