{"action":"Upgrade github.com/ipfs/go-ipfs to 0.12.1 or later.","affected":[{"fixed":"0.12.1","introduced":"0.11.0"}],"component":"github.com/ipfs/go-ipfs","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.12.1"],"ghsa_id":"GHSA-fx5p-f64h-93xc","id":"tcs_01M5KFVH34JF1RM38M1C952EED","modified_at":"2026-03-03T04:50:13.187900Z","published_at":"2024-08-21T15:11:31Z","references":["https://osv.dev/vulnerability/GO-2022-0418","https://github.com/ipfs/go-ipfs/security/advisories/GHSA-fx5p-f64h-93xc","https://github.com/ipfs/go-ipfs/commit/816a128aaf963d72c4930852ce32b9a4e31924a1","https://github.com/ipfs/go-ipfs/pull/8773","https://github.com/ipfs/go-ipfs/releases/tag/v0.12.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0418","url":"https://osv.dev/vulnerability/GO-2022-0418"}],"summary":"Opened exploitable ports in default docker-compose.yaml in go-ipfs in github.com/ipfs/go-ipfs"}