{"action":"Upgrade github.com/revel/revel to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"github.com/revel/revel","cve_ids":["CVE-2020-36568"],"ecosystem":"Go","epss":0.01562,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-hggr-p7v6-73p5","id":"tcs_01M5KFCH7314Y5RWW72GSGN7KM","modified_at":"2024-05-20T19:41:10Z","published_at":"2022-12-28T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-hggr-p7v6-73p5","https://nvd.nist.gov/vuln/detail/CVE-2020-36568","https://github.com/revel/revel/issues/1424","https://github.com/revel/revel/pull/1427","https://github.com/revel/revel/commit/d160ecb72207824005b19778594cbdc272e8a605","https://github.com/revel/revel","https://pkg.go.dev/vuln/GO-2020-0003"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"GHSA-hggr-p7v6-73p5","url":"https://osv.dev/vulnerability/GHSA-hggr-p7v6-73p5"}],"summary":"revel is vulnerable to resource exhaustion"}