{"action":"Upgrade github.com/nanobox-io/golang-nanoauth to 0.0.0-20200131131040-063a3fb69896 or later.","affected":[{"fixed":"0.0.0-20200131131040-063a3fb69896","introduced":"0.0.0-20160722212129-ac0cc4484ad4"}],"component":"github.com/nanobox-io/golang-nanoauth","cve_ids":["CVE-2020-36569"],"ecosystem":"Go","epss":0.0088,"exploited":false,"fixed_versions":["0.0.0-20200131131040-063a3fb69896"],"ghsa_id":"GHSA-hrm3-3xm6-x33h","id":"tcs_01M5KFD1Q29ZXYPXA3R67RDXHE","modified_at":"2023-11-08T04:03:47.973414Z","published_at":"2022-12-28T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-hrm3-3xm6-x33h","https://nvd.nist.gov/vuln/detail/CVE-2020-36569","https://github.com/nanobox-io/golang-nanoauth/pull/5","https://github.com/nanobox-io/golang-nanoauth/commit/063a3fb69896acf985759f0fe3851f15973993f3","https://github.com/nanobox-io/golang-nanoauth","https://pkg.go.dev/vuln/GO-2020-0004"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-hrm3-3xm6-x33h","url":"https://osv.dev/vulnerability/GHSA-hrm3-3xm6-x33h"}],"summary":"golang-nanoauth authentication bypass vulnerability"}