{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.1"}],"component":"simonwaldherr.de/go/zplgfa","cve_ids":["CVE-2023-36307"],"ecosystem":"Go","epss":0.00262,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xgmm-3vvr-6c8j","id":"tcs_01M5KFS4HET29DP4WWJ1EARASJ","modified_at":"2024-03-21T19:12:58.262369Z","published_at":"2023-09-05T06:30:14Z","references":["https://osv.dev/vulnerability/GHSA-xgmm-3vvr-6c8j","https://nvd.nist.gov/vuln/detail/CVE-2023-36307","https://github.com/SimonWaldherr/zplgfa/pull/6","https://github.com/SimonWaldherr/zplgfa/commit/c0d018ffa921cd2460b80f766b7969fbe63678fc","https://github.com/SimonWaldherr/zplgfa"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-xgmm-3vvr-6c8j","url":"https://osv.dev/vulnerability/GHSA-xgmm-3vvr-6c8j"}],"summary":"Index out of bounds leading to crash"}