{"action":"Upgrade golang.org/x/net to 0.0.0-20180925071336-cf3bd585ca2a or later.","affected":[{"introduced":"0"}],"component":"golang.org/x/net","cve_ids":["CVE-2018-17142"],"ecosystem":"Go","epss":0.02377,"exploited":false,"fixed_versions":["0.0.0-20180925071336-cf3bd585ca2a"],"ghsa_id":"GHSA-2wp2-chmh-r934","id":"tcs_01M5KFTSKAKNDWKF8M67AV942Q","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-07-01T20:11:34Z","references":["https://osv.dev/vulnerability/GO-2022-0192","https://go.dev/cl/136875","https://go.googlesource.com/net/+/cf3bd585ca2a5a21b057abd8be7eea2204af89d0","https://go.dev/issue/27702"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0192","url":"https://osv.dev/vulnerability/GO-2022-0192"}],"summary":"Incorrect parsing of nested templates in golang.org/x/net/html"}