{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.11.0"}],"component":"github.com/hashicorp/boundary","cve_ids":["CVE-2022-36182"],"ecosystem":"Go","epss":0.00701,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xqv2-3vvq-qg6r","id":"tcs_01M5KFSMBAH7FEHX153Q9H949W","modified_at":"2023-11-08T04:10:02.271886Z","published_at":"2022-10-27T19:00:38Z","references":["https://osv.dev/vulnerability/GHSA-xqv2-3vvq-qg6r","https://nvd.nist.gov/vuln/detail/CVE-2022-36182","https://github.com/hashicorp/boundary","https://owasp.org/www-community/attacks/Clickjacking","https://packetstormsecurity.com/files/168654/Hashicorp-Boundary-Clickjacking.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-xqv2-3vvq-qg6r","url":"https://osv.dev/vulnerability/GHSA-xqv2-3vvq-qg6r"}],"summary":"Hashicorp Boundary vulnerable to clickjacking"}