{"action":"Upgrade github.com/BishopFox/sliver to 1.7.6 or later.","affected":[{"fixed":"1.7.6","introduced":"0"}],"component":"github.com/BishopFox/sliver","cve_ids":["CVE-2026-77622"],"ecosystem":"Go","exploited":false,"fixed_versions":["1.7.6"],"ghsa_id":"GHSA-663m-7x7m-g4fw","id":"tcs_01M5JJ5CWHV91YC5N8NTA1S5YR","modified_at":"2026-10-19T21:40:45.149589702Z","published_at":"2026-10-15T20:09:33Z","references":["https://osv.dev/vulnerability/GHSA-663m-7x7m-g4fw","https://github.com/BishopFox/sliver/security/advisories/GHSA-663m-7x7m-g4fw","https://github.com/BishopFox/sliver/commit/80273462bd8b2a3cd724d2d6d0301a0cabfa977d","https://github.com/BishopFox/sliver","https://github.com/BishopFox/sliver/releases/tag/v1.7.6"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-663m-7x7m-g4fw","url":"https://osv.dev/vulnerability/GHSA-663m-7x7m-g4fw"}],"summary":"Sliver: Unauthenticated Memory Exhaustion Denial of Service in Sliver HTTP(S) Listener PNG Decoder"}