{"action":"Upgrade github.com/kiali/kiali to 1.15.1 or later.","affected":[{"fixed":"1.15.1","introduced":"0"}],"component":"github.com/kiali/kiali","cve_ids":["CVE-2020-1764"],"ecosystem":"Go","epss":0.03468,"exploited":false,"fixed_versions":["1.15.1"],"ghsa_id":"GHSA-64rh-r86q-75ff","id":"tcs_01M5KFWGANA31RFHNEXRH5K5J1","modified_at":"2026-03-03T04:50:47.086455Z","published_at":"2024-08-21T15:11:40Z","references":["https://osv.dev/vulnerability/GO-2022-0631","https://github.com/advisories/GHSA-64rh-r86q-75ff","https://nvd.nist.gov/vuln/detail/CVE-2020-1764","https://github.com/kiali/kiali/commit/93f5cd0b6698e8fe8772afb8f35816f6c086aef1","https://github.com/kiali/kiali/commit/ac7bd6c7ddb2e01356e21d360dd1c718a90706ad","https://github.com/kiali/kiali/commit/ce48af57113c805a25179aaab1a0fac2fb93653f","https://github.com/kiali/kiali/commit/faed1f5f90efae3df9fd6fb793f00ccc242b3a96","https://bugzilla.redhat.com/show_bug.cgi?id=1810383","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1764","https://github.com/jpts/cve-2020-1764-poc","https://kiali.io/news/security-bulletins/kiali-security-001"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0631","url":"https://osv.dev/vulnerability/GO-2022-0631"}],"summary":"Hard coded cryptographic key in Kiali in github.com/kiali/kiali"}