{"action":"Upgrade com.itextpdf:itextpdf to 5.5.13.3 or later.","affected":[{"fixed":"5.5.13.3","introduced":"0"}],"component":"com.itextpdf:itextpdf","cve_ids":["CVE-2021-43113"],"ecosystem":"Maven","epss":0.05425,"exploited":false,"fixed_versions":["5.5.13.3"],"ghsa_id":"GHSA-gv87-q66h-4277","id":"tcs_01M5N8YZN4SA0W6S2K0DHH552T","modified_at":"2023-11-08T04:07:08.802574Z","published_at":"2021-12-16T00:02:15Z","references":["https://osv.dev/vulnerability/GHSA-gv87-q66h-4277","https://nvd.nist.gov/vuln/detail/CVE-2021-43113","https://github.com/itext/itext7","https://github.com/itext/itext7/releases/tag/7.1.17","https://github.com/itext/itextpdf/releases/tag/5.5.13.3","https://lists.debian.org/debian-lts-announce/2023/01/msg00013.html","https://pastebin.com/BXnkY9YY","https://www.debian.org/security/2023/dsa-5323"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gv87-q66h-4277#Maven/com.itextpdf:itextpdf","url":"https://osv.dev/vulnerability/GHSA-gv87-q66h-4277"}],"summary":"Command injection in itext7-core"}