{"action":"Upgrade github.com/microstack-tech/parallax to 0.1.4 or later.","affected":[{"fixed":"0.1.4","introduced":"0"}],"component":"github.com/microstack-tech/parallax","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.1.4"],"ghsa_id":"GHSA-xc79-566c-j4qx","id":"tcs_01M5KFRZD7B13J7PGQD10QYB74","modified_at":"2025-10-23T20:34:55Z","published_at":"2025-10-10T23:45:20Z","references":["https://osv.dev/vulnerability/GHSA-xc79-566c-j4qx","https://github.com/microstack-tech/parallax/security/advisories/GHSA-xc79-566c-j4qx","https://github.com/microstack-tech/parallax/commit/f759e9090aaf00a43c616d7cbd133c44bb1ed01e","https://github.com/microstack-tech/parallax","https://github.com/microstack-tech/parallax/releases/tag/v0.1.4","https://pkg.go.dev/vuln/GO-2025-4019"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xc79-566c-j4qx","url":"https://osv.dev/vulnerability/GHSA-xc79-566c-j4qx"}],"summary":"Parallax is vulnerable to DoS via malicious p2p message"}