{"action":"Upgrade github.com/lightningnetwork/lnd to 0.15.2-beta or later.","affected":[{"fixed":"0.15.2-beta","introduced":"0"}],"component":"github.com/lightningnetwork/lnd","cve_ids":["CVE-2022-44797"],"ecosystem":"Go","epss":0.01301,"exploited":false,"fixed_versions":["0.15.2-beta"],"ghsa_id":"GHSA-2chg-86hq-7w38","id":"tcs_01M5KES02T0TYTMGVZC6RQ8MD0","modified_at":"2024-05-20T21:36:55Z","published_at":"2022-11-07T12:00:34Z","references":["https://osv.dev/vulnerability/GHSA-2chg-86hq-7w38","https://nvd.nist.gov/vuln/detail/CVE-2022-44797","https://github.com/lightningnetwork/lnd/issues/7002","https://github.com/btcsuite/btcd/pull/1896","https://github.com/btcsuite/btcd/commit/7fdaf6958781df46fffee4bc8bee38801c066da8","https://github.com/btcsuite/btcd","https://github.com/btcsuite/btcd/releases/tag/v0.23.2","https://github.com/lightningnetwork/lnd/releases/tag/v0.15.2-beta","https://pkg.go.dev/vuln/GO-2022-1098"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-2chg-86hq-7w38#Go/github.com/lightningnetwork/lnd","url":"https://osv.dev/vulnerability/GHSA-2chg-86hq-7w38"}],"summary":"btcd mishandles witness size checking"}