{"action":"Upgrade github.com/sylabs/scs-library-client to 1.3.4 or later.","affected":[{"fixed":"1.4.2","introduced":"1.4.0"},{"fixed":"1.3.4","introduced":"0"}],"component":"github.com/sylabs/scs-library-client","cve_ids":["CVE-2022-23538"],"ecosystem":"Go","epss":0.00709,"exploited":false,"fixed_versions":["1.4.2","1.3.4"],"ghsa_id":"GHSA-7p8m-22h4-9pj7","id":"tcs_01M5KF2D1ACNH8J86F1P2HB04D","modified_at":"2023-11-08T04:08:21.354781Z","published_at":"2023-01-20T22:38:04Z","references":["https://osv.dev/vulnerability/GHSA-7p8m-22h4-9pj7","https://github.com/sylabs/scs-library-client/security/advisories/GHSA-7p8m-22h4-9pj7","https://nvd.nist.gov/vuln/detail/CVE-2022-23538","https://github.com/sylabs/scs-library-client/commit/68ac4cab5cda0afd8758ff5b5e2e57be6a22fcfa","https://github.com/sylabs/scs-library-client/commit/b5db2aacba6bf1231f42dd475cc32e6355ab47b2","https://github.com/sylabs/scs-library-client/commit/eebd7caaab310b1fa803e55b8fc1acd9dcd2d00c","https://github.com/sylabs/scs-library-client","https://pkg.go.dev/vuln/GO-2023-1497"],"severity":{"label":"medium","score":5.2},"sources":[{"source":"osv","source_id":"GHSA-7p8m-22h4-9pj7","url":"https://osv.dev/vulnerability/GHSA-7p8m-22h4-9pj7"}],"summary":"scs-library-client may leak user credentials to third-party service via HTTP redirect"}