{"action":"Upgrade github.com/strangelove-ventures/horcrux/v3 to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"3.1.0"}],"component":"github.com/strangelove-ventures/horcrux/v3","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["3.3.2"],"ghsa_id":"GHSA-6wxf-7784-62fp","id":"tcs_01M5KF0ZMXCQSKV080722F6W59","modified_at":"2025-03-10T19:27:07.574482Z","published_at":"2025-03-07T20:00:01Z","references":["https://osv.dev/vulnerability/GHSA-6wxf-7784-62fp","https://github.com/strangelove-ventures/horcrux/security/advisories/GHSA-6wxf-7784-62fp","https://github.com/strangelove-ventures/horcrux/pull/169","https://github.com/strangelove-ventures/horcrux/commit/fb49be9baed30942b81b42da2b4f7040a2a83c02","https://github.com/strangelove-ventures/horcrux","https://github.com/strangelove-ventures/horcrux/releases/tag/v3.3.2"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-6wxf-7784-62fp","url":"https://osv.dev/vulnerability/GHSA-6wxf-7784-62fp"}],"summary":"Horcrux Double Sign Possibility"}