{"action":"Upgrade github.com/labstack/echo/v4 to 4.9.0 or later.","affected":[{"fixed":"4.9.0","introduced":"0"}],"component":"github.com/labstack/echo/v4","cve_ids":["CVE-2022-40083"],"ecosystem":"Go","epss":0.03238,"exploited":false,"fixed_versions":["4.9.0"],"ghsa_id":"GHSA-crxj-hrmp-4rwf","id":"tcs_01M5KF7VH719PA39BA25MEH59Z","modified_at":"2023-11-08T04:10:22.426797Z","published_at":"2022-09-29T00:00:26Z","references":["https://osv.dev/vulnerability/GHSA-crxj-hrmp-4rwf","https://nvd.nist.gov/vuln/detail/CVE-2022-40083","https://github.com/labstack/echo/issues/2259","https://github.com/labstack/echo/pull/2260","https://github.com/labstack/echo/pull/2260/commits/3154abd1401554fe4d1c09ec550506d8625fc042","https://github.com/labstack/echo/commit/0ac4d74402391912ff6da733bb09fd4c3980b4e1","https://github.com/labstack/echo","https://github.com/labstack/echo/releases/tag/v4.9.0","https://pkg.go.dev/vuln/GO-2022-1031"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-crxj-hrmp-4rwf","url":"https://osv.dev/vulnerability/GHSA-crxj-hrmp-4rwf"}],"summary":"Labstack Echo Open Redirect vulnerability"}