{"action":"Upgrade github.com/lf-edge/eve to 0.0.0-20230126065759-d9383a7ee4e1 or later.","affected":[{"introduced":"0"}],"component":"github.com/lf-edge/eve","cve_ids":["CVE-2023-43630"],"ecosystem":"Go","epss":0.00113,"exploited":false,"fixed_versions":["0.0.0-20230126065759-d9383a7ee4e1"],"ghsa_id":"GHSA-phcg-h58r-gmcq","id":"tcs_01M5KFHDRTSY9R0MXFCX7J6645","modified_at":"2026-02-05T04:11:17.319320Z","published_at":"2026-02-04T20:43:16Z","references":["https://osv.dev/vulnerability/GHSA-phcg-h58r-gmcq","https://github.com/lf-edge/eve/security/advisories/GHSA-phcg-h58r-gmcq","https://nvd.nist.gov/vuln/detail/CVE-2023-43630","https://github.com/lf-edge/eve/commit/d9383a7ee4e1c39f5c8c6d4a63cb2ebd00695e8a","https://asrg.io/security-advisories/config-partition-not-measured-from-2-fronts","https://asrg.io/security-advisories/cve-2023-43630","https://github.com/lf-edge/eve","https://help.zededa.com/hc/en-us/articles/43295940828827-TPM-PCR-Index-Security-Implications"],"severity":{"label":"medium","score":5.2},"sources":[{"source":"osv","source_id":"GHSA-phcg-h58r-gmcq","url":"https://osv.dev/vulnerability/GHSA-phcg-h58r-gmcq"}],"summary":"EVE Doesn't Measure Config Partition From 2 Fronts"}