{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.3-0.20250606002314-b4a2dfeb7b0f"}],"component":"github.com/arslanbekov/terraform-provider-sendgrid","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j443-wcqq-xprh","id":"tcs_01M5KFDCWZT9EHT3N9K4VXTAK5","modified_at":"2026-03-23T04:56:29.135498709Z","published_at":"2026-03-11T00:32:49Z","references":["https://osv.dev/vulnerability/GHSA-j443-wcqq-xprh","https://github.com/arslanbekov/terraform-provider-sendgrid/security/advisories/GHSA-j443-wcqq-xprh","https://github.com/advisories/GHSA-h355-32pf-p2xm","https://github.com/arslanbekov/terraform-provider-sendgrid","https://security.snyk.io/vuln/SNYK-CHAINGUARDLATEST-TERRAFORMPROVIDERSENDGRID-15265295"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-j443-wcqq-xprh","url":"https://osv.dev/vulnerability/GHSA-j443-wcqq-xprh"}],"summary":"Terraform Provider for SendGrid: TLS Session Resumption Bypasses Certificate Authority Trust Store Modifications in Go"}