{"action":"Upgrade github.com/prest/prest to 1.5.4 or later.","affected":[{"fixed":"1.5.4","introduced":"0"}],"component":"github.com/prest/prest","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.5.4"],"ghsa_id":"GHSA-wm25-j4gw-6vr3","id":"tcs_01M5KFQVA54FTET8CCYGWDR8KQ","modified_at":"2024-08-07T14:16:28Z","published_at":"2024-07-30T15:04:26Z","references":["https://osv.dev/vulnerability/GHSA-wm25-j4gw-6vr3","https://github.com/prest/prest/security/advisories/GHSA-wm25-j4gw-6vr3","https://github.com/prest/prest/commit/96ff96cfdc7ad6dd86e2289fcd5a37ee70c8926e","https://github.com/prest/prest","https://pkg.go.dev/vuln/GO-2024-3011"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-wm25-j4gw-6vr3","url":"https://osv.dev/vulnerability/GHSA-wm25-j4gw-6vr3"}],"summary":"pREST vulnerable to jwt bypass + sql injection"}