{"action":"Upgrade github.com/pires/go-proxyproto to 0.6.1 or later.","affected":[{"fixed":"0.6.1","introduced":"0"}],"component":"github.com/pires/go-proxyproto","cve_ids":["CVE-2021-23409"],"ecosystem":"Go","epss":0.01648,"exploited":false,"fixed_versions":["0.6.1"],"ghsa_id":"GHSA-xcf7-q56x-78gh","id":"tcs_01M5KFRZVSTA4ZFCFTTNFC7XBY","modified_at":"2026-09-10T03:49:15.401177543Z","published_at":"2021-07-26T21:23:49Z","references":["https://osv.dev/vulnerability/GHSA-xcf7-q56x-78gh","https://nvd.nist.gov/vuln/detail/CVE-2021-23409","https://github.com/pires/go-proxyproto/issues/65","https://github.com/pires/go-proxyproto/issues/75","https://github.com/pires/go-proxyproto/pull/74","https://github.com/pires/go-proxyproto/pull/74/commits/cdc63867da24fc609b727231f682670d0d1cd346","https://github.com/pires/go-proxyproto/pull/76","https://github.com/pires/go-proxyproto/commit/2e44d7a76a851d66890ab341403253afae5caac2","https://github.com/pires/go-proxyproto","https://github.com/pires/go-proxyproto/releases/tag/v0.6.0","https://github.com/pires/go-proxyproto/releases/tag/v0.6.1","https://pkg.go.dev/vuln/GO-2022-0233","https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPIRESGOPROXYPROTO-1316439"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xcf7-q56x-78gh","url":"https://osv.dev/vulnerability/GHSA-xcf7-q56x-78gh"}],"summary":"github.com/pires/go-proxyproto vulnerable to DoS via Connection descriptor exhaustion"}