{"action":"Upgrade github.com/matrix-org/gomatrixserverlib to 0.0.0-20220815091947-723fd495dde8 or later.","affected":[{"introduced":"0"}],"component":"github.com/matrix-org/gomatrixserverlib","cve_ids":["CVE-2022-36009"],"ecosystem":"Go","epss":0.00834,"exploited":false,"fixed_versions":["0.0.0-20220815091947-723fd495dde8"],"ghsa_id":"GHSA-grvv-h2f9-7v9c","id":"tcs_01M5KFXD86GBEGHPYKA76QQS5Z","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-08-22T18:08:50Z","references":["https://osv.dev/vulnerability/GO-2022-0952","https://github.com/matrix-org/gomatrixserverlib/commit/723fd495dde835d078b9f2074b6b62c06dea4575"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0952","url":"https://osv.dev/vulnerability/GO-2022-0952"}],"summary":"Incorrect event parsing in github.com/matrix-org/gomatrixserverlib"}