{"action":"Upgrade github.com/lf-edge/eve/pkg/grub to 0.0.0-20220708121648-5fef4d92e758 or later.","affected":[{"introduced":"0"}],"component":"github.com/lf-edge/eve/pkg/grub","cve_ids":["CVE-2023-43636"],"ecosystem":"Go","epss":0.00131,"exploited":false,"fixed_versions":["0.0.0-20220708121648-5fef4d92e758"],"ghsa_id":"GHSA-5h7v-g49c-h887","id":"tcs_01M5KEYC9HMSEN3JBYJR6A8EKA","modified_at":"2026-02-19T20:41:07.409452Z","published_at":"2026-02-04T23:14:42Z","references":["https://osv.dev/vulnerability/GHSA-5h7v-g49c-h887","https://github.com/lf-edge/eve/security/advisories/GHSA-5h7v-g49c-h887","https://nvd.nist.gov/vuln/detail/CVE-2023-43636","https://github.com/lf-edge/eve/commit/5fef4d92e75838cc78010edaed5247dfbdae1889","https://github.com/lf-edge/eve/commit/aa3501d6c57206ced222c33aea15a9169d629141","https://asrg.io/security-advisories/19274","https://asrg.io/security-advisories/cve-2023-43636","https://github.com/lf-edge/eve"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GHSA-5h7v-g49c-h887","url":"https://osv.dev/vulnerability/GHSA-5h7v-g49c-h887"}],"summary":"EVE Doesn't Protect Rootfs"}