{"action":"Upgrade knative.dev/eventing-github to 0.39.1 or later.","affected":[{"fixed":"0.39.1","introduced":"0"}],"component":"knative.dev/eventing-github","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.39.1"],"ghsa_id":"GHSA-v7hc-87jc-qrrr","id":"tcs_01M5KFNR14J7SE4BREVD44FZHW","modified_at":"2024-08-21T14:57:07.620437Z","published_at":"2023-12-06T19:19:35Z","references":["https://osv.dev/vulnerability/GHSA-v7hc-87jc-qrrr","https://github.com/knative-extensions/eventing-github/security/advisories/GHSA-v7hc-87jc-qrrr","https://github.com/knative-extensions/eventing-github/pull/442","https://github.com/knative-extensions/eventing-github/pull/446","https://github.com/knative-extensions/eventing-github/pull/447","https://github.com/knative-extensions/eventing-github/commit/ea5cb8b25fc3410dde45ce2eb95454e4cfe77c40","https://github.com/knative-extensions/eventing-github"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-v7hc-87jc-qrrr","url":"https://osv.dev/vulnerability/GHSA-v7hc-87jc-qrrr"}],"summary":"eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations"}