{"action":"Upgrade github.com/ethereum/go-ethereum to 1.9.25 or later.","affected":[{"fixed":"1.9.25","introduced":"0"}],"component":"github.com/ethereum/go-ethereum","cve_ids":["CVE-2020-26264"],"ecosystem":"Go","epss":0.01886,"exploited":false,"fixed_versions":["1.9.25"],"ghsa_id":"GHSA-r33q-22hv-j29q","id":"tcs_01M5KFTAKPFXT20H7YEJHW2PMP","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2021-0063","https://github.com/ethereum/go-ethereum/pull/21896","https://github.com/ethereum/go-ethereum/commit/bddd103a9f0af27ef533f04e06ea429cf76b6d46"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2021-0063","url":"https://osv.dev/vulnerability/GO-2021-0063"}],"summary":"Nil pointer dereference via malicious RPC message in github.com/ethereum/go-ethereum"}