{"action":"Upgrade goa.design/goa to 1.4.3 or later.","affected":[{"fixed":"1.4.3","introduced":"0"}],"component":"goa.design/goa","cve_ids":["CVE-2019-25073"],"ecosystem":"Go","epss":0.0145,"exploited":false,"fixed_versions":["1.4.3"],"ghsa_id":"GHSA-fjgq-224f-fq37","id":"tcs_01M5KF9C2JMPXFBA58F950E110","modified_at":"2023-11-08T04:01:32.979560Z","published_at":"2022-12-28T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-fjgq-224f-fq37","https://nvd.nist.gov/vuln/detail/CVE-2019-25073","https://github.com/goadesign/goa/pull/2388","https://github.com/goadesign/goa/commit/70b5a199d0f813d74423993832c424e1fc73fb39","https://github.com/goadesign/goa","https://pkg.go.dev/vuln/GO-2020-0032"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fjgq-224f-fq37#Go/goa.design/goa","url":"https://osv.dev/vulnerability/GHSA-fjgq-224f-fq37"}],"summary":"Goa vulnerable to path traversal"}