{"action":"Upgrade github.com/lf-edge/eve to 0.0.0-20220310190112-c0c966dc31e2 or later.","affected":[{"introduced":"0"}],"component":"github.com/lf-edge/eve","cve_ids":["CVE-2023-43637"],"ecosystem":"Go","epss":0.00142,"exploited":false,"fixed_versions":["0.0.0-20220310190112-c0c966dc31e2"],"ghsa_id":"GHSA-g7vp-j25f-h34p","id":"tcs_01M5KFAK83ZEZC9T8H1P6HFEFW","modified_at":"2026-02-19T20:41:23.893760Z","published_at":"2026-02-04T23:21:25Z","references":["https://osv.dev/vulnerability/GHSA-g7vp-j25f-h34p","https://github.com/lf-edge/eve/security/advisories/GHSA-g7vp-j25f-h34p","https://nvd.nist.gov/vuln/detail/CVE-2023-43637","https://github.com/lf-edge/eve/commit/c0c966dc31e2ed9aafc155e6be646adb14756c01","https://asrg.io/security-advisories/cve-2023-43637","https://asrg.io/security-advisories/vault-key-partially-predetermined","https://github.com/lf-edge/eve"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GHSA-g7vp-j25f-h34p","url":"https://osv.dev/vulnerability/GHSA-g7vp-j25f-h34p"}],"summary":"EVE Has Partially Predetermined Vault Key"}