{"action":"Upgrade github.com/answerdev/answer to 1.0.6 or later.","affected":[{"fixed":"1.0.6","introduced":"0"}],"component":"github.com/answerdev/answer","cve_ids":["CVE-2023-1542"],"ecosystem":"Go","epss":0.0075,"exploited":false,"fixed_versions":["1.0.6"],"ghsa_id":"GHSA-r95w-7cpx-h5mx","id":"tcs_01M5KFMDJM9VKDPSSF4H8ZJ41R","modified_at":"2024-08-20T20:58:41.493797Z","published_at":"2023-03-21T06:30:17Z","references":["https://osv.dev/vulnerability/GHSA-r95w-7cpx-h5mx","https://nvd.nist.gov/vuln/detail/CVE-2023-1542","https://github.com/answerdev/answer/commit/4ca2429d190a6e614f5bbee1173c80a7cffcc568","https://github.com/answerdev/answer","https://huntr.dev/bounties/d947417c-5a12-407a-9a2f-fa696f65126f"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-r95w-7cpx-h5mx","url":"https://osv.dev/vulnerability/GHSA-r95w-7cpx-h5mx"}],"summary":"Answer vulnerable to Business Logic Errors"}