{"action":"Upgrade github.com/bradleyfalzon/ghinstallation to 1.1.2-0.20210308182858-d24f14f8be70 or later.","affected":[{"fixed":"1.1.2-0.20210308182858-d24f14f8be70","introduced":"0"}],"component":"github.com/bradleyfalzon/ghinstallation","cve_ids":["CVE-2022-39304"],"ecosystem":"Go","epss":0.00393,"exploited":false,"fixed_versions":["1.1.2-0.20210308182858-d24f14f8be70"],"ghsa_id":"GHSA-h4q8-96p6-jcgr","id":"tcs_01M5KFY1TBR01VQ1Y7BFG8GD2N","modified_at":"2024-05-20T16:03:47Z","published_at":"2022-12-22T21:01:01Z","references":["https://osv.dev/vulnerability/GO-2022-1178","https://github.com/bradleyfalzon/ghinstallation/security/advisories/GHSA-h4q8-96p6-jcgr","https://github.com/bradleyfalzon/ghinstallation/commit/d24f14f8be70d94129d76026e8b0f4f9170c8c3e","https://docs.github.com/en/developers/apps/building-github-apps/authenticating-with-github-apps#authenticating-as-an-installation"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-1178","url":"https://osv.dev/vulnerability/GO-2022-1178"}],"summary":"JWT leak in github.com/bradleyfalzon/ghinstallation"}