{"action":"Upgrade github.com/almeidapaulopt/tsdproxy to 1.4.4-0.20260603142855-434819b4421e or later.","affected":[{"fixed":"1.4.4-0.20260603142855-434819b4421e","introduced":"0"}],"component":"github.com/almeidapaulopt/tsdproxy","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.4.4-0.20260603142855-434819b4421e"],"ghsa_id":"GHSA-g936-7jqj-mwv8","id":"tcs_01M5KFANMSPJ6MH0AZC1YYQ2V4","modified_at":"2026-07-21T19:19:26.721190815Z","published_at":"2026-07-10T21:43:13Z","references":["https://osv.dev/vulnerability/GHSA-g936-7jqj-mwv8","https://github.com/almeidapaulopt/tsdproxy/security/advisories/GHSA-g936-7jqj-mwv8","https://github.com/almeidapaulopt/tsdproxy"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-g936-7jqj-mwv8","url":"https://osv.dev/vulnerability/GHSA-g936-7jqj-mwv8"}],"summary":"TSDProxy: Internal proxy auth token forwarded to backend services enables management API escalation"}