{"action":"Upgrade github.com/mojocn/base64Captcha to 1.3.6 or later.","affected":[{"fixed":"1.3.6","introduced":"0"}],"component":"github.com/mojocn/base64Captcha","cve_ids":["CVE-2023-45292"],"ecosystem":"Go","epss":0.00297,"exploited":false,"fixed_versions":["1.3.6"],"ghsa_id":"GHSA-5mmw-p5qv-w3x5","id":"tcs_01M5KEYHZ6KYFFT015Y00M9JKA","modified_at":"2023-12-14T22:03:11Z","published_at":"2023-12-12T00:30:17Z","references":["https://osv.dev/vulnerability/GHSA-5mmw-p5qv-w3x5","https://nvd.nist.gov/vuln/detail/CVE-2023-45292","https://github.com/mojocn/base64Captcha/issues/120","https://github.com/mojocn/base64Captcha/commit/5ab86bd6f333aad3936f912fc52b411168dcd4a7","https://github.com/mojocn/base64Captcha/commit/9b11012caca58925f1e47c770f79f2fa47e3ad13","https://github.com/mojocn/base64Captcha","https://pkg.go.dev/vuln/GO-2023-2386"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-5mmw-p5qv-w3x5","url":"https://osv.dev/vulnerability/GHSA-5mmw-p5qv-w3x5"}],"summary":"Always incorrect control flow in github.com/mojocn/base64Captcha"}