{"action":"Upgrade github.com/csaf-poc/csaf_distribution to 0.8.2 or later.","affected":[{"fixed":"0.8.2","introduced":"0"}],"component":"github.com/csaf-poc/csaf_distribution","cve_ids":["CVE-2022-43996"],"ecosystem":"Go","epss":0.00484,"exploited":false,"fixed_versions":["0.8.2"],"ghsa_id":"GHSA-xxfx-w2rw-gh63","id":"tcs_01M5KFT00ZWSRJEHNA1A2SQK9M","modified_at":"2025-04-23T14:55:10Z","published_at":"2022-12-14T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-xxfx-w2rw-gh63","https://nvd.nist.gov/vuln/detail/CVE-2022-43996","https://github.com/csaf-poc/csaf_distribution/commit/17f22855ee8d4270dd17ff748c30ed7304846fdc","https://github.com/csaf-poc/csaf_distribution","https://github.com/csaf-poc/csaf_distribution/releases/tag/v0.8.2","https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0003.json"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-xxfx-w2rw-gh63","url":"https://osv.dev/vulnerability/GHSA-xxfx-w2rw-gh63"}],"summary":"csaf-poc/csaf_distribution Cross-site Scripting vulnerability"}