{"action":"Upgrade github.com/apache/trafficcontrol to 5.1.4+incompatible or later.","affected":[{"fixed":"5.1.4+incompatible","introduced":"5.1.0+incompatible"},{"fixed":"6.0.1+incompatible","introduced":"6.0.0+incompatible"}],"component":"github.com/apache/trafficcontrol","cve_ids":["CVE-2021-43350"],"ecosystem":"Go","epss":0.04761,"exploited":false,"fixed_versions":["5.1.4+incompatible","6.0.1+incompatible"],"ghsa_id":"GHSA-mg2c-rc36-p594","id":"tcs_01M5KG2TE3R8T2VBGKCXDAJPTG","modified_at":"2026-03-03T04:55:05.214706Z","published_at":"2024-06-10T16:38:54Z","references":["https://osv.dev/vulnerability/GO-2024-2776","https://github.com/advisories/GHSA-mg2c-rc36-p594","https://nvd.nist.gov/vuln/detail/CVE-2021-43350","http://www.openwall.com/lists/oss-security/2021/11/11/3","http://www.openwall.com/lists/oss-security/2021/11/11/4","http://www.openwall.com/lists/oss-security/2021/11/17/1","https://trafficcontrol.apache.org/security"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2776","url":"https://osv.dev/vulnerability/GO-2024-2776"}],"summary":"Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection in github.com/apache/trafficcontrol"}