{"action":"Upgrade github.com/goreleaser/goreleaser to 1.26.1 or later.","affected":[{"fixed":"1.26.1","introduced":"1.26.0"}],"component":"github.com/goreleaser/goreleaser","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.26.1"],"ghsa_id":"GHSA-f6mm-5fc7-3g3c","id":"tcs_01M5KF8G576W3NFZDNWZ3TV26M","modified_at":"2026-09-10T03:50:00.369183280Z","published_at":"2024-05-15T17:17:10Z","references":["https://osv.dev/vulnerability/GHSA-f6mm-5fc7-3g3c","https://github.com/goreleaser/goreleaser/security/advisories/GHSA-f6mm-5fc7-3g3c","https://github.com/goreleaser/goreleaser/pull/4787","https://github.com/goreleaser/goreleaser/commit/22f734e41f7a5111a031a3a4eb714c1b6aa6456b","https://github.com/goreleaser/goreleaser"],"severity":{"label":"medium","score":6.2},"sources":[{"source":"osv","source_id":"GHSA-f6mm-5fc7-3g3c","url":"https://osv.dev/vulnerability/GHSA-f6mm-5fc7-3g3c"}],"summary":"goreleaser shows environment by default"}