{"action":"Upgrade github.com/dinever/golf to 0.3.0 or later.","affected":[{"fixed":"0.3.0","introduced":"0"}],"component":"github.com/dinever/golf","cve_ids":["CVE-2016-15005"],"ecosystem":"Go","epss":0.00415,"exploited":false,"fixed_versions":["0.3.0"],"ghsa_id":"GHSA-q9qr-jwpw-3qvv","id":"tcs_01M5KFJT7NQ4ERG3GS73WG6Q7N","modified_at":"2024-05-20T19:42:50Z","published_at":"2022-12-28T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-q9qr-jwpw-3qvv","https://nvd.nist.gov/vuln/detail/CVE-2016-15005","https://github.com/dinever/golf/issues/20","https://github.com/dinever/golf/pull/24","https://github.com/dinever/golf/commit/3776f338be48b5bc5e8cf9faff7851fc52a3f1fe","https://github.com/dinever/golf","https://github.com/dinever/golf/releases/tag/v0.3.0","https://pkg.go.dev/vuln/GO-2020-0045"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-q9qr-jwpw-3qvv","url":"https://osv.dev/vulnerability/GHSA-q9qr-jwpw-3qvv"}],"summary":"Golf may allow attacker to bypass CSRF protections due to weak PRNG"}