{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.1.0","last_affected":"0.2.0"}],"component":"github.com/bincyber/go-sqlcrypter","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2j6r-9vv4-6gf5","id":"tcs_01M5KES8Y9XB3XB3XS7Z02EZP2","modified_at":"2024-06-05T16:43:27.767485Z","published_at":"2024-05-20T21:56:07Z","references":["https://osv.dev/vulnerability/GHSA-2j6r-9vv4-6gf5","https://github.com/bincyber/go-sqlcrypter/issues/127","https://github.com/bincyber/go-sqlcrypter/pull/128","https://github.com/bincyber/go-sqlcrypter/commit/96c73cd2b8fd15c9da9b3eafe62c9a040f6537e8","https://github.com/bincyber/go-sqlcrypter","https://pkg.go.dev/vuln/GO-2024-2451"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-2j6r-9vv4-6gf5","url":"https://osv.dev/vulnerability/GHSA-2j6r-9vv4-6gf5"}],"summary":"github.com/bincyber/go-sqlcrypter vulnerable to IV collision"}