{"action":"Upgrade mellium.im/sasl to 0.3.1 or later.","affected":[{"fixed":"0.3.1","introduced":"0"}],"component":"mellium.im/sasl","cve_ids":["CVE-2022-48195"],"ecosystem":"Go","epss":0.00881,"exploited":false,"fixed_versions":["0.3.1"],"ghsa_id":"GHSA-gvfj-fxx3-j323","id":"tcs_01M5KFBEN6H56ZSP0T1KHXPW7Q","modified_at":"2024-05-20T21:43:00Z","published_at":"2022-12-31T03:30:26Z","references":["https://osv.dev/vulnerability/GHSA-gvfj-fxx3-j323","https://nvd.nist.gov/vuln/detail/CVE-2022-48195","https://codeberg.org/mellium/sasl","https://codeberg.org/mellium/sasl/commit/e6cbf681b247c4efa1477eaad2cc47a01707b732","https://codeberg.org/mellium/sasl/releases/tag/v0.3.1","https://mellium.im/cve/cve-2022-48195","https://pkg.go.dev/vuln/GO-2023-1268"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gvfj-fxx3-j323","url":"https://osv.dev/vulnerability/GHSA-gvfj-fxx3-j323"}],"summary":"mellium.im/sasl authentication failure due to insufficient nonce randomness"}