{"action":"Upgrade github.com/valyala/fasthttp to 1.34.0 or later.","affected":[{"fixed":"1.34.0","introduced":"0"}],"component":"github.com/valyala/fasthttp","cve_ids":["CVE-2022-21221"],"ecosystem":"Go","epss":0.02496,"exploited":false,"fixed_versions":["1.34.0"],"ghsa_id":"GHSA-fx95-883v-4q4h","id":"tcs_01M5KFA19VDDKT6CPB2RE4216P","modified_at":"2026-07-08T06:49:38.033511120Z","published_at":"2022-03-18T00:01:11Z","references":["https://osv.dev/vulnerability/GHSA-fx95-883v-4q4h","https://nvd.nist.gov/vuln/detail/CVE-2022-21221","https://github.com/valyala/fasthttp/issues/1226","https://github.com/valyala/fasthttp/commit/15262ecf3c602364639d465daba1e7f3604d00e8","https://github.com/valyala/fasthttp/commit/6b5bc7bb304975147b4af68df54ac214ed2554c1","https://github.com/valyala/fasthttp","https://github.com/valyala/fasthttp/releases/tag/v1.34.0","https://pkg.go.dev/vuln/GO-2022-0355","https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMVALYALAFASTHTTP-2407866"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fx95-883v-4q4h","url":"https://osv.dev/vulnerability/GHSA-fx95-883v-4q4h"}],"summary":"Path traversal in github.com/valyala/fasthttp"}