{"action":"Upgrade github.com/bitly/oauth2_proxy to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"github.com/bitly/oauth2_proxy","cve_ids":["CVE-2017-1000070"],"ecosystem":"Go","epss":0.00996,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-jm34-xm8m-w958","id":"tcs_01M5KFECR729V4HP95R0H3PNKS","modified_at":"2023-11-08T03:58:42.391972Z","published_at":"2021-12-20T18:04:40Z","references":["https://osv.dev/vulnerability/GHSA-jm34-xm8m-w958","https://nvd.nist.gov/vuln/detail/CVE-2017-1000070","https://github.com/bitly/oauth2_proxy/issues/228","https://github.com/bitly/oauth2_proxy/pull/359","https://github.com/bitly/oauth2_proxy/commit/289a6ccf463a425c7606178c510fc5eeb9c8b050","https://tools.ietf.org/html/rfc6819#section-5.2.3.5","https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-1000070"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-jm34-xm8m-w958","url":"https://osv.dev/vulnerability/GHSA-jm34-xm8m-w958"}],"summary":"Open Redirect in oauth2_proxy"}