{"action":"Upgrade github.com/lf-edge/eve to 0.0.0-20230519072751-977f42b07fa9 or later.","affected":[{"introduced":"0"}],"component":"github.com/lf-edge/eve","cve_ids":["CVE-2023-43635"],"ecosystem":"Go","epss":0.00117,"exploited":false,"fixed_versions":["0.0.0-20230519072751-977f42b07fa9"],"ghsa_id":"GHSA-4jvr-vj2c-8q37","id":"tcs_01M5KEWVF6AEZ8MFED6EH21DXA","modified_at":"2026-02-19T20:41:22.297357Z","published_at":"2026-02-04T23:12:29Z","references":["https://osv.dev/vulnerability/GHSA-4jvr-vj2c-8q37","https://github.com/lf-edge/eve/security/advisories/GHSA-4jvr-vj2c-8q37","https://nvd.nist.gov/vuln/detail/CVE-2023-43635","https://asrg.io/security-advisories/cve-2023-43635","https://asrg.io/security-advisories/vault-key-sealed-with-sha1-pcrs","https://github.com/lf-edge/eve"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GHSA-4jvr-vj2c-8q37","url":"https://osv.dev/vulnerability/GHSA-4jvr-vj2c-8q37"}],"summary":"EVE Seals Vault Key With SHA1 PCRs"}