{"action":"Upgrade stdlib to 1.19.1 or later.","affected":[{"fixed":"1.19.1","introduced":"1.19.0-0"}],"component":"stdlib","cve_ids":["CVE-2022-32190"],"ecosystem":"Go","epss":0.02152,"exploited":false,"fixed_versions":["1.19.1"],"id":"tcs_01M5KFXHJEABCRC6HK5PFMK5M7","modified_at":"2026-07-15T14:29:32.822650429Z","published_at":"2022-09-12T20:23:15Z","references":["https://osv.dev/vulnerability/GO-2022-0988","https://groups.google.com/g/golang-announce/c/x49AQzIVX-s","https://go.dev/issue/54385","https://go.dev/cl/423514"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0988","url":"https://osv.dev/vulnerability/GO-2022-0988"}],"summary":"Failure to strip relative path components in net/url"}