{"action":"Upgrade github.com/square/go-jose to 0.0.0-20160903044734-789a4c4bd4c1 or later.","affected":[{"introduced":"0"}],"component":"github.com/square/go-jose","cve_ids":["CVE-2016-9123"],"ecosystem":"Go","epss":0.02149,"exploited":false,"fixed_versions":["0.0.0-20160903044734-789a4c4bd4c1"],"ghsa_id":"GHSA-3fx4-7f69-5mmg","id":"tcs_01M5KFT1XYDNJ2KQ5X9ZWWCGPM","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2020-0009","https://github.com/square/go-jose/commit/789a4c4bd4c118f7564954f441b29c153ccd6a96","https://www.openwall.com/lists/oss-security/2016/11/03/1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2020-0009","url":"https://osv.dev/vulnerability/GO-2020-0009"}],"summary":"Integer overflow in github.com/square/go-jose"}