{"action":"Upgrade github.com/kitabisa/teler-waf to 0.1.1 or later.","affected":[{"fixed":"0.1.1","introduced":"0"}],"component":"github.com/kitabisa/teler-waf","cve_ids":["CVE-2023-26046"],"ecosystem":"Go","epss":0.00536,"exploited":false,"fixed_versions":["0.1.1"],"ghsa_id":"GHSA-9f95-hhg4-pg4f","id":"tcs_01M5KF5FSVZMDXVV8R4HX171WB","modified_at":"2024-05-20T21:48:03Z","published_at":"2023-03-01T19:19:43Z","references":["https://osv.dev/vulnerability/GHSA-9f95-hhg4-pg4f","https://github.com/kitabisa/teler-waf/security/advisories/GHSA-9f95-hhg4-pg4f","https://nvd.nist.gov/vuln/detail/CVE-2023-26046","https://github.com/kitabisa/teler-waf/commit/d1d49cfddfa3ec2adad962870f14b85cd1aaf739","https://github.com/kitabisa/teler-waf","https://github.com/kitabisa/teler-waf/compare/v0.1.0...v0.1.1","https://github.com/kitabisa/teler-waf/releases/tag/v0.1.1","https://pkg.go.dev/vuln/GO-2023-1597"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-9f95-hhg4-pg4f","url":"https://osv.dev/vulnerability/GHSA-9f95-hhg4-pg4f"}],"summary":"teler-waf subject to Bypass of Common Web Attack Threat Rule with HTML Entities Payload"}