{"action":"Upgrade github.com/sajari/docconv to 1.2.1 or later.","affected":[{"fixed":"1.2.1","introduced":"0"}],"component":"github.com/sajari/docconv","cve_ids":["CVE-2022-4741"],"ecosystem":"Go","epss":0.00828,"exploited":false,"fixed_versions":["1.2.1"],"ghsa_id":"GHSA-qvx2-59g8-8hph","id":"tcs_01M5KFKMRK55F8P7M4AGVKC397","modified_at":"2024-03-01T14:21:08Z","published_at":"2022-12-25T21:30:21Z","references":["https://osv.dev/vulnerability/GHSA-qvx2-59g8-8hph","https://nvd.nist.gov/vuln/detail/CVE-2022-4741","https://github.com/sajari/docconv/pull/111","https://github.com/sajari/docconv/commit/42bcff666855ab978e67a9041d0cdea552f20301","https://github.com/sajari/docconv","https://github.com/sajari/docconv/releases/tag/v1.2.1","https://pkg.go.dev/vuln/GO-2022-1188","https://vuldb.com/?ctiid.216779","https://vuldb.com/?id.216779"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qvx2-59g8-8hph","url":"https://osv.dev/vulnerability/GHSA-qvx2-59g8-8hph"}],"summary":"docconv vulnerable to Memory Allocation with Excessive Size Value"}