{"action":"Upgrade github.com/mittwald/kube-httpcache to 0.7.1 or later.","affected":[{"fixed":"0.7.1","introduced":"0"}],"component":"github.com/mittwald/kube-httpcache","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.7.1"],"ghsa_id":"GHSA-47xh-qxqv-mgvg","id":"tcs_01M5KEW5HBVA0S1GXJX1EVH4CE","modified_at":"2022-12-02T22:24:44Z","published_at":"2022-12-02T22:24:44Z","references":["https://osv.dev/vulnerability/GHSA-47xh-qxqv-mgvg","https://github.com/mittwald/kube-httpcache/security/advisories/GHSA-47xh-qxqv-mgvg","https://github.com/mittwald/kube-httpcache","https://varnish-cache.org/security/VSV00011.html#vsv00011"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-47xh-qxqv-mgvg","url":"https://osv.dev/vulnerability/GHSA-47xh-qxqv-mgvg"}],"summary":"kube-httpcache is vulnerable to Cross-Site Request Forgery (CSRF)"}