{"action":"Upgrade github.com/csaf-poc/csaf_distribution to 0.8.2 or later.","affected":[{"fixed":"0.8.2","introduced":"0"}],"component":"github.com/csaf-poc/csaf_distribution","cve_ids":["CVE-2022-43996"],"ecosystem":"Go","epss":0.00484,"exploited":false,"fixed_versions":["0.8.2"],"ghsa_id":"GHSA-xxfx-w2rw-gh63","id":"tcs_01M5KFY0P54MER7VQQHZ0CQZ7E","modified_at":"2026-03-03T04:51:16.220346Z","published_at":"2024-08-21T16:03:59Z","references":["https://osv.dev/vulnerability/GO-2022-1164","https://github.com/advisories/GHSA-xxfx-w2rw-gh63","https://nvd.nist.gov/vuln/detail/CVE-2022-43996","https://github.com/csaf-poc/csaf_distribution/commit/17f22855ee8d4270dd17ff748c30ed7304846fdc","https://github.com/csaf-poc/csaf_distribution/releases/tag/v0.8.2","https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0003.json"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-1164","url":"https://osv.dev/vulnerability/GO-2022-1164"}],"summary":"csaf-poc/csaf_distribution Cross-site Scripting vulnerability in github.com/csaf-poc/csaf_distribution"}