{"action":"Upgrade golang.org/x/crypto to 0.0.0-20170330155735-e4e2799dd7aa or later.","affected":[{"introduced":"0"}],"component":"golang.org/x/crypto","cve_ids":["CVE-2017-3204"],"ecosystem":"Go","epss":0.03156,"exploited":false,"fixed_versions":["0.0.0-20170330155735-e4e2799dd7aa"],"ghsa_id":"GHSA-xhjq-w7xm-p8qj","id":"tcs_01M5KFT2CEEDP7V5XVH3GWEWHN","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2020-0013","https://go.dev/cl/38701","https://go.googlesource.com/crypto/+/e4e2799dd7aab89f583e1d898300d96367750991","https://go.dev/issue/19767","https://bridge.grumpy-troll.org/2017/04/golang-ssh-security/"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2020-0013","url":"https://osv.dev/vulnerability/GO-2020-0013"}],"summary":"Man-in-the-middle attack in golang.org/x/crypto/ssh"}