{"action":"Upgrade gopkg.in/macaron.v1 to 1.3.7 or later.","affected":[{"fixed":"1.3.7","introduced":"0"}],"component":"gopkg.in/macaron.v1","cve_ids":["CVE-2020-12666"],"ecosystem":"Go","epss":0.0141,"exploited":false,"fixed_versions":["1.3.7"],"ghsa_id":"GHSA-733f-44f3-3frw","id":"tcs_01M5KF174A4BAE598TAM455YH9","modified_at":"2024-05-20T19:24:04Z","published_at":"2021-05-18T21:08:35Z","references":["https://osv.dev/vulnerability/GHSA-733f-44f3-3frw","https://nvd.nist.gov/vuln/detail/CVE-2020-12666","https://github.com/go-macaron/macaron/issues/198","https://github.com/go-macaron/macaron/issues/198#issuecomment-622885959","https://github.com/go-macaron/macaron/pull/199","https://github.com/go-macaron/macaron/pull/199/commits/6bd9385542f7133467ab7d09a5f28f7d5dc52af7","https://github.com/go-macaron/macaron/commit/addc7461c3a90a040e79aa75bfd245107a210245","https://github.com/go-macaron/macaron","https://github.com/go-macaron/macaron/releases/tag/v1.3.7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3QEUOHRC4EN4WZ66EVFML2UCV7ZQ63XZ","https://pkg.go.dev/vuln/GO-2020-0039"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-733f-44f3-3frw","url":"https://osv.dev/vulnerability/GHSA-733f-44f3-3frw"}],"summary":"gopkg.in/macaron.v1 Open Redirect vulnerability"}