{"action":"Upgrade github.com/pomerium/pomerium to 0.17.4 or later.","affected":[{"fixed":"0.22.2","introduced":"0.22.0"},{"fixed":"0.21.4","introduced":"0.21.0"},{"fixed":"0.20.1","introduced":"0.20.0"},{"fixed":"0.19.2","introduced":"0.19.0"},{"fixed":"0.18.1","introduced":"0.18.0"},{"fixed":"0.17.4","introduced":"0"}],"component":"github.com/pomerium/pomerium","cve_ids":["CVE-2023-33189"],"ecosystem":"Go","epss":0.00921,"exploited":false,"fixed_versions":["0.22.2","0.21.4","0.20.1","0.19.2","0.18.1","0.17.4"],"ghsa_id":"GHSA-pvrc-wvj2-f59p","id":"tcs_01M5KFHW9GCV1PC42NWQ75KQNK","modified_at":"2026-09-10T03:49:53.753350053Z","published_at":"2023-05-26T22:00:39Z","references":["https://osv.dev/vulnerability/GHSA-pvrc-wvj2-f59p","https://github.com/pomerium/pomerium/security/advisories/GHSA-pvrc-wvj2-f59p","https://nvd.nist.gov/vuln/detail/CVE-2023-33189","https://github.com/pomerium/pomerium/commit/d315e683357a9b587ba9ef399a8813bcc52fdebb","https://github.com/pomerium/pomerium","https://github.com/pomerium/pomerium/releases/tag/v0.17.4","https://github.com/pomerium/pomerium/releases/tag/v0.18.1","https://github.com/pomerium/pomerium/releases/tag/v0.19.2","https://github.com/pomerium/pomerium/releases/tag/v0.20.1","https://github.com/pomerium/pomerium/releases/tag/v0.21.4","https://github.com/pomerium/pomerium/releases/tag/v0.22.2"],"severity":{"label":"critical","score":10},"sources":[{"source":"osv","source_id":"GHSA-pvrc-wvj2-f59p","url":"https://osv.dev/vulnerability/GHSA-pvrc-wvj2-f59p"}],"summary":"Pomerium vulnerable to Incorrect Authorization with specially crafted requests"}