{"action":"Upgrade github.com/cortexproject/cortex to 1.13.2 or later.","affected":[{"fixed":"1.13.2","introduced":"1.13.0"},{"fixed":"1.14.1","introduced":"1.14.0"}],"component":"github.com/cortexproject/cortex","cve_ids":["CVE-2022-23536"],"ecosystem":"Go","epss":0.00817,"exploited":false,"fixed_versions":["1.13.2","1.14.1"],"ghsa_id":"GHSA-cq2g-pw6q-hf7j","id":"tcs_01M5KFY1N76VP46RH4S7BESG58","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-12-22T17:41:59Z","references":["https://osv.dev/vulnerability/GO-2022-1175","https://github.com/cortexproject/cortex/security/advisories/GHSA-cq2g-pw6q-hf7j","https://github.com/cortexproject/cortex/commit/03e023d8b012887b31cc268d0d011b01e1e65506","https://cortexmetrics.io/docs/api/#set-alertmanager-configuration"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-1175","url":"https://osv.dev/vulnerability/GO-2022-1175"}],"summary":"Exposure of local files in github.com/cortexproject/cortex"}