{"action":"Upgrade stdlib to 1.6.4 or later.","affected":[{"fixed":"1.6.4","introduced":"0"},{"fixed":"1.7.4","introduced":"1.7.0-0"}],"component":"stdlib","cve_ids":["CVE-2017-1000097"],"ecosystem":"Go","epss":0.01442,"exploited":false,"fixed_versions":["1.6.4","1.7.4"],"id":"tcs_01M5KFTRKP91W5476A1VS16NZA","modified_at":"2024-06-03T20:51:31Z","published_at":"2022-05-24T20:17:59Z","references":["https://osv.dev/vulnerability/GO-2022-0171","https://go.googlesource.com/go/+/7e5b2e0ec144d5f5b2923a7d5db0b9143f79a35a","https://go.dev/issue/18141","https://groups.google.com/g/golang-dev/c/4NdLzS8sls8/m/uIz8QlnIBQAJ"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GO-2022-0171","url":"https://osv.dev/vulnerability/GO-2022-0171"},{"source":"nvd","source_id":"CVE-2017-1000097","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000097"}],"summary":"Mishandled trust preferences for root certificates on Darwin in crypto/x509"}