{"action":"Upgrade github.com/bishopfox/sliver to 1.7.2 or later.","affected":[{"fixed":"1.7.2","introduced":"0"}],"component":"github.com/bishopfox/sliver","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.7.2"],"ghsa_id":"GHSA-2phg-qgmm-r638","id":"tcs_01M5KESFV73FDC0RM58ZRN44FR","modified_at":"2026-02-28T05:14:23.667267Z","published_at":"2026-02-25T17:36:44Z","references":["https://osv.dev/vulnerability/GHSA-2phg-qgmm-r638","https://github.com/BishopFox/sliver/security/advisories/GHSA-2phg-qgmm-r638","https://github.com/BishopFox/sliver/commit/0cf5a47cfdf94b6ab481ec3ea0db09f31654c0f0","https://github.com/BishopFox/sliver","https://github.com/BishopFox/sliver/releases/tag/v1.7.2","https://pkg.go.dev/vuln/GO-2026-4548"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-2phg-qgmm-r638","url":"https://osv.dev/vulnerability/GHSA-2phg-qgmm-r638"}],"summary":"Sliver has Potential Zip Bomb Denial of Service in GzipEncoder"}