{"action":"Upgrade github.com/omec-project/amf to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"github.com/omec-project/amf","cve_ids":["CVE-2026-8779"],"ecosystem":"Go","epss":0.00303,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-fxvj-wqv2-xgcq","id":"tcs_01M5KFA20VK4NNRX24CV7MAFM3","modified_at":"2026-06-25T19:56:31.310000375Z","published_at":"2026-05-18T03:31:49Z","references":["https://osv.dev/vulnerability/GHSA-fxvj-wqv2-xgcq","https://nvd.nist.gov/vuln/detail/CVE-2026-8779","https://github.com/omec-project/amf/issues/671","https://github.com/omec-project/amf/pull/666","https://github.com/omec-project/amf","https://github.com/omec-project/amf/releases/tag/v2.2.0","https://vuldb.com/submit/811616","https://vuldb.com/vuln/364403","https://vuldb.com/vuln/364403/cti"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-fxvj-wqv2-xgcq","url":"https://osv.dev/vulnerability/GHSA-fxvj-wqv2-xgcq"}],"summary":"AMF Improperly Restricts Operations within the Bounds of a Memory Buffer"}