{"action":"Upgrade github.com/cloudflare/golz4 to 0.0.0-20140711154735-199f5f787806 or later.","affected":[{"introduced":"0"}],"component":"github.com/cloudflare/golz4","cve_ids":["CVE-2014-125026"],"ecosystem":"Go","epss":0.01111,"exploited":false,"fixed_versions":["0.0.0-20140711154735-199f5f787806"],"ghsa_id":"GHSA-4wp2-8rm2-jgmh","id":"tcs_01M5KEXASXRWC7BZKN2WHAP750","modified_at":"2024-05-20T19:43:07Z","published_at":"2022-12-28T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-4wp2-8rm2-jgmh","https://nvd.nist.gov/vuln/detail/CVE-2014-125026","https://github.com/cloudflare/golz4/issues/5","https://github.com/cloudflare/golz4/commit/199f5f7878062ca17a98e079f2dbe1205e2ed898","https://github.com/cloudflare/golz4","https://pkg.go.dev/vuln/GO-2020-0022"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-4wp2-8rm2-jgmh","url":"https://osv.dev/vulnerability/GHSA-4wp2-8rm2-jgmh"}],"summary":"LZ4 vulnerable to Out-of-bounds Write"}