{"action":"Upgrade github.com/projectcalico/calico to 3.26.3 or later.","affected":[{"fixed":"3.26.3","introduced":"3.26.0"},{"introduced":"0","last_affected":"3.25.1"}],"component":"github.com/projectcalico/calico","cve_ids":["CVE-2023-41378"],"ecosystem":"Go","epss":0.00723,"exploited":false,"fixed_versions":["3.26.3"],"ghsa_id":"GHSA-5r5h-q934-cccp","id":"tcs_01M5KEYRASZMNJ8R2SEDQWZ4HV","modified_at":"2026-08-07T08:12:24.008853119Z","published_at":"2023-11-06T18:30:19Z","references":["https://osv.dev/vulnerability/GHSA-5r5h-q934-cccp","https://nvd.nist.gov/vuln/detail/CVE-2023-41378","https://github.com/projectcalico/calico/pull/7908","https://github.com/projectcalico/calico/pull/7993","https://github.com/projectcalico/calico/commit/2ebc1f92ecc39332cf1d55ba676d9101af24982f","https://github.com/projectcalico/calico/commit/ad8bd001e650ec7742ac30e58247e7eef5956125","https://github.com/projectcalico/calico","https://www.tigera.io/security-bulletins-tta-2023-001"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-5r5h-q934-cccp","url":"https://osv.dev/vulnerability/GHSA-5r5h-q934-cccp"}],"summary":"Calico Typha denial of service vulnerability"}