{"action":"Upgrade golang.org/x/crypto to 0.0.0-20170330155735-e4e2799dd7aa or later.","affected":[{"introduced":"0"}],"component":"golang.org/x/crypto","cve_ids":["CVE-2017-3204"],"ecosystem":"Go","epss":0.03156,"exploited":false,"fixed_versions":["0.0.0-20170330155735-e4e2799dd7aa"],"ghsa_id":"GHSA-xhjq-w7xm-p8qj","id":"tcs_01M5KFSA5M9JR6QXR6SXHQYZDV","modified_at":"2024-04-19T21:43:20Z","published_at":"2023-02-07T22:39:34Z","references":["https://osv.dev/vulnerability/GHSA-xhjq-w7xm-p8qj","https://nvd.nist.gov/vuln/detail/CVE-2017-3204","https://github.com/golang/go/issues/19767","https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991","https://bridge.grumpy-troll.org/2017/04/golang-ssh-security","https://go.dev/cl/340830","https://go.dev/cl/38701","https://go.dev/issue/19767","https://go.googlesource.com/crypto/+/e4e2799dd7aab89f583e1d898300d96367750991","https://godoc.org/golang.org/x/crypto/ssh","https://pkg.go.dev/vuln/GO-2020-0013","https://web.archive.org/web/20170423080311/https://www.securityfocus.com/bid/97481","https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-3204"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-xhjq-w7xm-p8qj","url":"https://osv.dev/vulnerability/GHSA-xhjq-w7xm-p8qj"}],"summary":"golang.org/x/crypto/ssh Man-in-the-Middle attack"}