{"action":"Upgrade github.com/ipfs/kubo to 0.19.0 or later.","affected":[{"fixed":"0.19.0","introduced":"0"}],"component":"github.com/ipfs/kubo","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.19.0"],"ghsa_id":"GHSA-qvqg-6rp8-4p9h","id":"tcs_01M5KFKMDZWAB1SJR1TG9DTAYQ","modified_at":"2023-05-11T20:40:16Z","published_at":"2023-05-11T20:40:16Z","references":["https://osv.dev/vulnerability/GHSA-qvqg-6rp8-4p9h","https://github.com/ipfs/boxo/security/advisories/GHSA-m974-xj4j-7qv5","https://github.com/ipfs/kubo/security/advisories/GHSA-qvqg-6rp8-4p9h","https://nvd.nist.gov/vuln/detail/CVE-2023-25568","https://github.com/ipfs/kubo"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-qvqg-6rp8-4p9h","url":"https://osv.dev/vulnerability/GHSA-qvqg-6rp8-4p9h"}],"summary":"github.com/ipfs/kubo affected by DOS Bitswap unbounded persistent memory leak"}