{"action":"Upgrade code.cloudfoundry.org/gorouter to 0.0.0-20191101214924-b1b5c44e050f or later.","affected":[{"introduced":"0"}],"component":"code.cloudfoundry.org/gorouter","cve_ids":["CVE-2019-11289"],"ecosystem":"Go","epss":0.0151,"exploited":false,"fixed_versions":["0.0.0-20191101214924-b1b5c44e050f"],"ghsa_id":"GHSA-5796-p3m6-9qj4","id":"tcs_01M5KEXWP6R10WN9EJMWB5GD1S","modified_at":"2024-05-20T19:56:16Z","published_at":"2021-05-18T15:31:39Z","references":["https://osv.dev/vulnerability/GHSA-5796-p3m6-9qj4","https://nvd.nist.gov/vuln/detail/CVE-2019-11289","https://github.com/cloudfoundry/gorouter/commit/b1b5c44e050f73b399b379ca63a42a2c5780a83f","https://github.com/cloudfoundry/gorouter","https://pkg.go.dev/vuln/GO-2021-0102","https://www.cloudfoundry.org/blog/cve-2019-11289"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5796-p3m6-9qj4","url":"https://osv.dev/vulnerability/GHSA-5796-p3m6-9qj4"}],"summary":"Cloud Foundry Routing Improper Input Validation vulnerability"}