{"action":"Upgrade github.com/hashicorp/boundary to 0.19.5 or later.","affected":[{"fixed":"0.19.5","introduced":"0"},{"fixed":"0.20.3","introduced":"0.20.0"},{"fixed":"0.21.3","introduced":"0.21.0"}],"component":"github.com/hashicorp/boundary","cve_ids":["CVE-2026-7776"],"ecosystem":"Go","epss":0.00341,"exploited":false,"fixed_versions":["0.19.5","0.20.3","0.21.3"],"ghsa_id":"GHSA-7x9r-wcgg-w86f","id":"tcs_01M5KF2SW9F8FNBRG12AF9RMMY","modified_at":"2026-07-21T14:00:35.523620905Z","published_at":"2026-05-05T00:30:22Z","references":["https://osv.dev/vulnerability/GHSA-7x9r-wcgg-w86f","https://nvd.nist.gov/vuln/detail/CVE-2026-7776","https://discuss.hashicorp.com/t/hcsec-2026-11-boundary-workers-vulnerable-to-denial-of-service-during-tls-handshake","https://github.com/advisories/GHSA-7x9r-wcgg-w86f","https://github.com/hashicorp/boundary"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7x9r-wcgg-w86f","url":"https://osv.dev/vulnerability/GHSA-7x9r-wcgg-w86f"}],"summary":"Hashicorp Boundary workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes"}