{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.38.5"}],"component":"github.com/cometbft/cometbft","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-555p-m4v6-cqxv","id":"tcs_01M5KEXNAWZJCM42FJDV2H2498","modified_at":"2024-02-28T18:06:24Z","published_at":"2024-02-28T18:06:24Z","references":["https://osv.dev/vulnerability/GHSA-555p-m4v6-cqxv","https://github.com/cometbft/cometbft/security/advisories/GHSA-555p-m4v6-cqxv","https://github.com/cometbft/cometbft"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-555p-m4v6-cqxv","url":"https://osv.dev/vulnerability/GHSA-555p-m4v6-cqxv"}],"summary":"ASA-2024-004: Default configuration param for Evidence may limit window of validity"}