{"action":"Upgrade gemmi to 0.6.4+ds-1 or later.","affected":[{"fixed":"0.6.4+ds-1","introduced":"0"}],"component":"gemmi","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["0.6.4+ds-1"],"id":"tcs_01M5NJDF4JY4347WQ8FV2PDCWA","modified_at":"2026-10-23T18:05:25.826338672Z","published_at":"2023-12-04T06:15:07.173Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-49287","https://security-tracker.debian.org/tracker/CVE-2023-49287"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-49287#Debian:14/gemmi","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-49287"}],"summary":"TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1.2.6."}