{"action":"Upgrade golang.org/x/image to 0.5.0 or later.","affected":[{"fixed":"0.5.0","introduced":"0"}],"component":"golang.org/x/image","cve_ids":["CVE-2022-41727"],"ecosystem":"Go","epss":0.00306,"exploited":false,"fixed_versions":["0.5.0"],"ghsa_id":"GHSA-qgc7-mgm3-q253","id":"tcs_01M5KFYN1WGW4AAVY58C93QK3V","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-02-16T22:25:24Z","references":["https://osv.dev/vulnerability/GO-2023-1572","https://go.dev/issue/58003","https://go.dev/cl/468195","https://groups.google.com/g/golang-announce/c/ag-FiyjlD5o"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1572","url":"https://osv.dev/vulnerability/GO-2023-1572"}],"summary":"Denial of service via crafted TIFF image in golang.org/x/image/tiff"}