{"action":"Upgrade go.etcd.io/etcd to 0.5.0-alpha.5.0.20190108173120-83c051b701d3 or later.","affected":[{"fixed":"0.5.0-alpha.5.0.20190108173120-83c051b701d3","introduced":"0"}],"component":"go.etcd.io/etcd","cve_ids":["CVE-2018-16886"],"ecosystem":"Go","epss":0.04031,"exploited":false,"fixed_versions":["0.5.0-alpha.5.0.20190108173120-83c051b701d3"],"ghsa_id":"GHSA-h6xx-pmxh-3wgp","id":"tcs_01M5KFC2JX5P9ZKY8FXNFQ0NPP","modified_at":"2026-09-10T03:49:28.808778898Z","published_at":"2022-04-12T22:41:32Z","references":["https://osv.dev/vulnerability/GHSA-h6xx-pmxh-3wgp","https://nvd.nist.gov/vuln/detail/CVE-2018-16886","https://github.com/etcd-io/etcd/pull/10366","https://github.com/etcd-io/etcd/commit/0191509637546621d6f2e18e074e955ab8ef374d","https://github.com/etcd-io/etcd/commit/bf9d0d8291dc71ecbfb2690612954e1a298154b2","https://access.redhat.com/errata/RHSA-2019:0237","https://access.redhat.com/errata/RHSA-2019:1352","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16886","https://github.com/etcd-io/etcd","https://github.com/etcd-io/etcd/blob/1eee465a43720d713bb69f7b7f5e120135fdb1ac/CHANGELOG-3.2.md#security-authentication","https://github.com/etcd-io/etcd/blob/1eee465a43720d713bb69f7b7f5e120135fdb1ac/CHANGELOG-3.3.md#security-authentication","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS","https://pkg.go.dev/vuln/GO-2021-0077","http://www.securityfocus.com/bid/106540"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-h6xx-pmxh-3wgp#Go/go.etcd.io/etcd","url":"https://osv.dev/vulnerability/GHSA-h6xx-pmxh-3wgp"}],"summary":"go.etcd.io/etcd Authentication Bypass"}