{"action":"Upgrade stdlib to 1.6.4 or later.","affected":[{"fixed":"1.6.4","introduced":"0"},{"fixed":"1.7.4","introduced":"1.7.0-0"}],"component":"stdlib","cve_ids":["CVE-2017-1000098"],"ecosystem":"Go","epss":0.02078,"exploited":false,"fixed_versions":["1.6.4","1.7.4"],"id":"tcs_01M5KFTKHB5YB2PRVG442MCM6F","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-02-15T23:56:14Z","references":["https://osv.dev/vulnerability/GO-2021-0172","https://go.dev/cl/30410","https://go.googlesource.com/go/+/7478ea5dba7ed02ddffd91c1d17ec8141f7cf184","https://go.dev/issue/16296","https://groups.google.com/g/golang-dev/c/4NdLzS8sls8/m/uIz8QlnIBQAJ"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2021-0172","url":"https://osv.dev/vulnerability/GO-2021-0172"}],"summary":"Denial of service when parsing large forms in mime/multipart"}