{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/v2fly/v2ray-core","cve_ids":["CVE-2021-4070"],"ecosystem":"Go","epss":0.00858,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-4cxw-hq44-r344","id":"tcs_01M5KEWDYXW0BGYZP4KYNWYK44","modified_at":"2024-08-21T15:27:03.016510Z","published_at":"2022-02-24T00:00:52Z","references":["https://osv.dev/vulnerability/GHSA-4cxw-hq44-r344","https://nvd.nist.gov/vuln/detail/CVE-2021-4070","https://github.com/v2fly/v2ray-core/commit/c1af2bfd7aa59a4482aa7f6ec4b9208c1d350b5c","https://github.com/v2fly/v2ray-core","https://huntr.dev/bounties/8da19456-4d89-41ef-9781-a41efd6a1877"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-4cxw-hq44-r344#Go/github.com/v2fly/v2ray-core","url":"https://osv.dev/vulnerability/GHSA-4cxw-hq44-r344"}],"summary":"Off-by-one Error in v2fly/v2ray-core"}