{"action":"Upgrade github.com/ElrondNetwork/elrond-go to 1.3.50 or later.","affected":[{"fixed":"1.3.50","introduced":"0"}],"component":"github.com/ElrondNetwork/elrond-go","cve_ids":["CVE-2022-46173"],"ecosystem":"Go","epss":0.00758,"exploited":false,"fixed_versions":["1.3.50"],"ghsa_id":"GHSA-p228-4mrh-ww7r","id":"tcs_01M5KFGNC51QF677TFNP4Y573C","modified_at":"2024-08-21T16:28:47.143282Z","published_at":"2022-12-30T16:57:11Z","references":["https://osv.dev/vulnerability/GHSA-p228-4mrh-ww7r","https://github.com/ElrondNetwork/elrond-go/security/advisories/GHSA-p228-4mrh-ww7r","https://nvd.nist.gov/vuln/detail/CVE-2022-46173","https://github.com/ElrondNetwork/elrond-go/pull/4718","https://github.com/ElrondNetwork/elrond-go/commit/39d7ddcb08bb34217dab6daef7cd9d287fb8cab3","https://github.com/ElrondNetwork/elrond-go"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-p228-4mrh-ww7r","url":"https://osv.dev/vulnerability/GHSA-p228-4mrh-ww7r"}],"summary":"Elrond-GO processing: fallback search of SCRs when not found in the main cache"}