{"action":"Upgrade gopkg.in/yaml.v3 to 3.0.0-20220521103104-8f96da9f5d5e or later.","affected":[{"fixed":"3.0.0-20220521103104-8f96da9f5d5e","introduced":"0"}],"component":"gopkg.in/yaml.v3","cve_ids":["CVE-2022-28948"],"ecosystem":"Go","epss":0.03965,"exploited":false,"fixed_versions":["3.0.0-20220521103104-8f96da9f5d5e"],"ghsa_id":"GHSA-hp87-p4gw-j4gq","id":"tcs_01M5KFWCJT0JTKW4PWX5ZFE89S","modified_at":"2026-02-04T03:15:39.976408Z","published_at":"2022-08-22T18:00:47Z","references":["https://osv.dev/vulnerability/GO-2022-0603","https://github.com/go-yaml/yaml/commit/8f96da9f5d5eff988554c1aae1784627c4bf6754","https://github.com/go-yaml/yaml/issues/666"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0603","url":"https://osv.dev/vulnerability/GO-2022-0603"}],"summary":"Panic in gopkg.in/yaml.v3"}