{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1.4"}],"component":"github.com/uber/kraken","cve_ids":["CVE-2022-47747"],"ecosystem":"Go","epss":0.00799,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hj4g-4w36-x8hp","id":"tcs_01M5KFCMSMG7EFMFPV9CBTFX2P","modified_at":"2025-04-04T02:08:51Z","published_at":"2023-01-20T18:30:22Z","references":["https://osv.dev/vulnerability/GHSA-hj4g-4w36-x8hp","https://nvd.nist.gov/vuln/detail/CVE-2022-47747","https://github.com/uber/kraken/issues/333","https://github.com/advisories/GHSA-hj4g-4w36-x8hp","https://github.com/uber/kraken"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hj4g-4w36-x8hp","url":"https://osv.dev/vulnerability/GHSA-hj4g-4w36-x8hp"}],"summary":"Kraken has arbitrary file read vulnerability via component testfs"}