{"action":"Upgrade github.com/theupdateframework/go-tuf to 0.3.2 or later.","affected":[{"fixed":"0.3.2","introduced":"0"}],"component":"github.com/theupdateframework/go-tuf","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.3.2"],"ghsa_id":"GHSA-3633-5h82-39pq","id":"tcs_01M5KFXJE47804XBCAGZ3K1BXD","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-09-21T15:07:26Z","references":["https://osv.dev/vulnerability/GO-2022-1004","https://github.com/advisories/GHSA-3633-5h82-39pq","https://github.com/theupdateframework/go-tuf/pull/369"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-1004","url":"https://osv.dev/vulnerability/GO-2022-1004"}],"summary":"Improper handling of keys in github.com/theupdateframework/go-tuf"}