{"action":"Upgrade github.com/zitadel/zitadel-go/v3 to 3.0.0-next.3 or later.","affected":[{"fixed":"3.0.0-next.3","introduced":"3.0.0-next.1"}],"component":"github.com/zitadel/zitadel-go/v3","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["3.0.0-next.3"],"ghsa_id":"GHSA-qc6v-5g5m-8cw2","id":"tcs_01M5KFJVDR5SKP78E32X8RCFK8","modified_at":"2024-07-15T17:55:15Z","published_at":"2024-07-15T17:55:15Z","references":["https://osv.dev/vulnerability/GHSA-qc6v-5g5m-8cw2","https://github.com/zitadel/zitadel-go/security/advisories/GHSA-qc6v-5g5m-8cw2","https://github.com/zitadel/zitadel-go","https://github.com/zitadel/zitadel-go/releases/tag/v3.0.0-next.3","https://pkg.go.dev/vuln/GO-2024-2611","https://pkg.go.dev/vuln/GO-2024-2631","https://pkg.go.dev/vuln/GO-2024-2687","https://www.cve.org/CVERecord?id=CVE-2023-45288"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-qc6v-5g5m-8cw2","url":"https://osv.dev/vulnerability/GHSA-qc6v-5g5m-8cw2"}],"summary":"ZITADEL Go's GRPC example code vulnerability - GO-2024-2687 HTTP/2 CONTINUATION flood in net/http"}