{"action":"Upgrade github.com/edgelesssys/constellation/v2 to 2.16.3 or later.","affected":[{"fixed":"2.16.3","introduced":"0"}],"component":"github.com/edgelesssys/constellation/v2","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["2.16.3"],"ghsa_id":"GHSA-g8fc-vrcg-8vjg","id":"tcs_01M5KFAKY621CEAXMW7ERTBG0C","modified_at":"2024-06-04T19:35:51Z","published_at":"2024-04-15T18:13:15Z","references":["https://osv.dev/vulnerability/GHSA-g8fc-vrcg-8vjg","https://github.com/edgelesssys/constellation/security/advisories/GHSA-g8fc-vrcg-8vjg","https://github.com/cilium/cilium/issues/25626","https://github.com/edgelesssys/constellation","https://pkg.go.dev/vuln/GO-2024-2727"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-g8fc-vrcg-8vjg","url":"https://osv.dev/vulnerability/GHSA-g8fc-vrcg-8vjg"}],"summary":"Constallation has pods exposed to peers in VPC"}