{"action":"Upgrade github.com/bits-and-blooms/bloom to 3.3.1 or later.","affected":[{"fixed":"3.3.1","introduced":"0"}],"component":"github.com/bits-and-blooms/bloom","cve_ids":["CVE-2023-0247"],"ecosystem":"Go","epss":0.00414,"exploited":false,"fixed_versions":["3.3.1"],"ghsa_id":"GHSA-fgwp-pwqq-g3w4","id":"tcs_01M5KF96V0DB3BQZGMBFGD02CA","modified_at":"2023-11-08T04:11:06.754326Z","published_at":"2023-01-12T18:30:28Z","references":["https://osv.dev/vulnerability/GHSA-fgwp-pwqq-g3w4","https://nvd.nist.gov/vuln/detail/CVE-2023-0247","https://github.com/bits-and-blooms/bloom/commit/658f1393d4c52254a3d22f5f64f217405ec5fefb","https://github.com/bits-and-blooms/bloom","https://huntr.dev/bounties/cab50e44-0995-4ac1-a5d5-889293b9704f"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-fgwp-pwqq-g3w4","url":"https://osv.dev/vulnerability/GHSA-fgwp-pwqq-g3w4"}],"summary":"Bloom Uncontrolled Search Path Element vulnerability"}