{"action":"Upgrade golang.org/x/crypto to 0.0.0-20200220183623-bac4c82f6975 or later.","affected":[{"introduced":"0"}],"component":"golang.org/x/crypto","cve_ids":["CVE-2020-9283"],"ecosystem":"Go","epss":0.20891,"exploited":false,"fixed_versions":["0.0.0-20200220183623-bac4c82f6975"],"ghsa_id":"GHSA-ffhg-7mh4-33c4","id":"tcs_01M5KFT27JYEZWJBFF9DAWVZHC","modified_at":"2026-02-04T03:36:34.306120Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2020-0012","https://go.dev/cl/220357","https://go.googlesource.com/crypto/+/bac4c82f69751a6dd76e702d54b3ceb88adab236","https://groups.google.com/g/golang-announce/c/3L45YRc91SY"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2020-0012","url":"https://osv.dev/vulnerability/GO-2020-0012"}],"summary":"Panic due to improper verification of cryptographic signatures in golang.org/x/crypto/ssh"}