{"action":"Upgrade github.com/kiali/kiali to 1.57.4 or later.","affected":[{"fixed":"1.57.4","introduced":"0"}],"component":"github.com/kiali/kiali","cve_ids":["CVE-2022-3962"],"ecosystem":"Go","epss":0.00738,"exploited":false,"fixed_versions":["1.57.4"],"ghsa_id":"GHSA-6f4m-j56w-55c3","id":"tcs_01M5KF0157G86DFW098FA604RV","modified_at":"2026-09-10T03:49:58.069138369Z","published_at":"2023-09-23T21:30:17Z","references":["https://osv.dev/vulnerability/GHSA-6f4m-j56w-55c3","https://nvd.nist.gov/vuln/detail/CVE-2022-3962","https://github.com/kiali/kiali/commit/aab7694f850f04d7fd875fac5f720a93ccdf01ad","https://access.redhat.com/errata/RHSA-2023:0542","https://access.redhat.com/security/cve/CVE-2022-3962","https://bugzilla.redhat.com/show_bug.cgi?id=2148661","https://github.com/kiali/kiali","https://issues.redhat.com/browse/OSSM-2251?attachmentViewMode=list"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-6f4m-j56w-55c3","url":"https://osv.dev/vulnerability/GHSA-6f4m-j56w-55c3"}],"summary":"Kiali content spoofing vulnerability"}