{"action":"Upgrade github.com/libp2p/go-libp2p to 0.18.0 or later.","affected":[{"fixed":"0.18.0","introduced":"0"}],"component":"github.com/libp2p/go-libp2p","cve_ids":["CVE-2022-23492"],"ecosystem":"Go","epss":0.01051,"exploited":false,"fixed_versions":["0.18.0"],"ghsa_id":"GHSA-j7qp-mfxf-8xjw","id":"tcs_01M5KFXY0DNM6ZDFV376QA1WTY","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-12-14T02:21:28Z","references":["https://osv.dev/vulnerability/GO-2022-1148","https://github.com/libp2p/go-libp2p/security/advisories/GHSA-j7qp-mfxf-8xjw","https://github.com/libp2p/go-libp2p/commit/15d7dfbf54264ead8e6f49ca658d79c90635e2de"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-1148","url":"https://osv.dev/vulnerability/GO-2022-1148"}],"summary":"Resource exhaustion in github.com/libp2p/go-libp2p"}