{"action":"Upgrade github.com/libp2p/go-libp2p to 0.27.4 or later.","affected":[{"fixed":"0.27.4","introduced":"0"}],"component":"github.com/libp2p/go-libp2p","cve_ids":["CVE-2023-40583"],"ecosystem":"Go","epss":0.00952,"exploited":false,"fixed_versions":["0.27.4"],"ghsa_id":"GHSA-gcq9-qqwx-rgj3","id":"tcs_01M5KFAVC21V97X9FNTX5FRFZM","modified_at":"2023-11-17T22:07:30Z","published_at":"2023-08-24T22:22:59Z","references":["https://osv.dev/vulnerability/GHSA-gcq9-qqwx-rgj3","https://github.com/libp2p/go-libp2p/security/advisories/GHSA-gcq9-qqwx-rgj3","https://nvd.nist.gov/vuln/detail/CVE-2023-40583","https://github.com/libp2p/go-libp2p/commit/45d3c6fff662ddd6938982e7e9309ad5fa2ad8dd","https://github.com/libp2p/go-libp2p","https://github.com/libp2p/go-libp2p/releases/tag/v0.27.4","https://github.com/libp2p/go-libp2p/releases/tag/v0.27.7"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gcq9-qqwx-rgj3","url":"https://osv.dev/vulnerability/GHSA-gcq9-qqwx-rgj3"}],"summary":"libp2p nodes vulnerable to OOM attack"}