{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.39.0"}],"component":"knative.dev/eventing-gitlab","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-99jv-8292-2hpm","id":"tcs_01M5KF59CQCPC6H45RCRK7M0AE","modified_at":"2023-12-08T21:57:27Z","published_at":"2023-12-08T21:57:27Z","references":["https://osv.dev/vulnerability/GHSA-99jv-8292-2hpm","https://github.com/knative-extensions/eventing-gitlab/security/advisories/GHSA-99jv-8292-2hpm","https://github.com/knative-extensions/eventing-gitlab/commit/463fcb36ac31cdac34eda0e900b64039d6d30b36","https://github.com/knative-extensions/eventing-gitlab/commit/db76c668aa47890e7fe73c9df3135da292cfd9ec","https://github.com/knative-extensions/eventing-gitlab"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-99jv-8292-2hpm","url":"https://osv.dev/vulnerability/GHSA-99jv-8292-2hpm"}],"summary":"eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations"}