{"action":"Upgrade github.com/containrrr/shoutrrr to 0.6.0 or later.","affected":[{"fixed":"0.6.0","introduced":"0"}],"component":"github.com/containrrr/shoutrrr","cve_ids":["CVE-2022-25891"],"ecosystem":"Go","epss":0.01645,"exploited":false,"fixed_versions":["0.6.0"],"ghsa_id":"GHSA-477v-w82m-634j","id":"tcs_01M5KEW3KJWQR8W5WGBPA8RND4","modified_at":"2026-07-08T06:49:33.539012721Z","published_at":"2022-07-16T00:00:20Z","references":["https://osv.dev/vulnerability/GHSA-477v-w82m-634j","https://nvd.nist.gov/vuln/detail/CVE-2022-25891","https://github.com/containrrr/shoutrrr/issues/240","https://github.com/containrrr/shoutrrr/pull/242","https://github.com/containrrr/shoutrrr/commit/6a27056f9d7522a8b493216195cb7634bf4b5c42","https://github.com/containrrr/shoutrrr","https://github.com/containrrr/shoutrrr/releases/tag/v0.6.0","https://pkg.go.dev/vuln/GO-2022-0528","https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMCONTAINRRRSHOUTRRRPKGUTIL-2849059"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-477v-w82m-634j","url":"https://osv.dev/vulnerability/GHSA-477v-w82m-634j"}],"summary":"Shoutrrr util package DoS via sending 2000, 4000, or 6000 character messages"}