{"action":"Upgrade github.com/shamaton/msgpack/v2 to 2.1.1 or later.","affected":[{"fixed":"2.1.1","introduced":"0"}],"component":"github.com/shamaton/msgpack/v2","cve_ids":["CVE-2022-41719"],"ecosystem":"Go","epss":0.01128,"exploited":false,"fixed_versions":["2.1.1"],"ghsa_id":"GHSA-jr77-8gx4-h5qh","id":"tcs_01M5KFEQEQM2T71F7F1GD6XB0K","modified_at":"2023-11-08T04:10:32.235022Z","published_at":"2022-11-11T12:00:33Z","references":["https://osv.dev/vulnerability/GHSA-jr77-8gx4-h5qh","https://nvd.nist.gov/vuln/detail/CVE-2022-41719","https://github.com/shamaton/msgpack/issues/31","https://github.com/shamaton/msgpack/pull/32","https://github.com/shamaton/msgpack","https://github.com/shamaton/msgpack/releases/tag/v2.1.1","https://pkg.go.dev/vuln/GO-2022-0972"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jr77-8gx4-h5qh","url":"https://osv.dev/vulnerability/GHSA-jr77-8gx4-h5qh"}],"summary":"MessagePack for Golang subject to DoS via Unmarshal panic"}