{"action":"Upgrade github.com/bishopfox/sliver to 1.7.6 or later.","affected":[{"fixed":"1.7.6","introduced":"0"}],"component":"github.com/bishopfox/sliver","cve_ids":["CVE-2026-77622"],"ecosystem":"Go","exploited":false,"fixed_versions":["1.7.6"],"ghsa_id":"GHSA-663m-7x7m-g4fw","id":"tcs_01M5JJ4FFQGJQQ0PCHBK3CHRJ2","modified_at":"2026-10-19T21:31:50.758852104Z","published_at":"2026-10-19T21:08:35Z","references":["https://osv.dev/vulnerability/GO-2026-6777","https://github.com/BishopFox/sliver/security/advisories/GHSA-663m-7x7m-g4fw","https://github.com/BishopFox/sliver/commit/80273462bd8b2a3cd724d2d6d0301a0cabfa977d","https://github.com/BishopFox/sliver/releases/tag/v1.7.6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6777","url":"https://osv.dev/vulnerability/GO-2026-6777"}],"summary":"Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder in github.com/bishopfox/sliver"}