{"action":"Upgrade github.com/filecoin-project/go-f3 to 0.8.9 or later.","affected":[{"fixed":"0.8.9","introduced":"0"}],"component":"github.com/filecoin-project/go-f3","cve_ids":["CVE-2025-59941"],"ecosystem":"Go","epss":0.00245,"exploited":false,"fixed_versions":["0.8.9"],"ghsa_id":"GHSA-7pq9-rf9p-wcrf","id":"tcs_01M5KF2F1VVM7RGEYRMMCC9EC8","modified_at":"2025-10-23T20:32:35Z","published_at":"2025-09-29T20:40:02Z","references":["https://osv.dev/vulnerability/GHSA-7pq9-rf9p-wcrf","https://github.com/filecoin-project/go-f3/security/advisories/GHSA-7pq9-rf9p-wcrf","https://nvd.nist.gov/vuln/detail/CVE-2025-59941","https://github.com/filecoin-project/go-f3/commit/76fff18cf07b21baccf537024bdb2fb41f75f6e2#diff-e1f646cea41790e1642e4e649c9e3c526344736d67222201703e1c29c23e9625","https://github.com/filecoin-project/go-f3","https://pkg.go.dev/vuln/GO-2025-3989"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-7pq9-rf9p-wcrf","url":"https://osv.dev/vulnerability/GHSA-7pq9-rf9p-wcrf"}],"summary":"go-f3 Vulnerable to Cached Justification Verification Bypass"}