{"action":"Upgrade github.com/corazawaf/coraza/v3 to 3.0.1 or later.","affected":[{"fixed":"3.0.1","introduced":"0"}],"component":"github.com/corazawaf/coraza/v3","cve_ids":["CVE-2023-40586"],"ecosystem":"Go","epss":0.00723,"exploited":false,"fixed_versions":["3.0.1"],"ghsa_id":"GHSA-c2pj-v37r-2p6h","id":"tcs_01M5KFZG54P61A8P38PWQZTY3C","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-07-05T17:30:04Z","references":["https://osv.dev/vulnerability/GO-2023-1874","https://github.com/corazawaf/coraza/security/advisories/GHSA-c2pj-v37r-2p6h","https://github.com/corazawaf/coraza/commit/a5239ba3ce839e14d9b4f9486e1b4a403dcade8c","https://github.com/corazawaf/coraza/releases/tag/v3.0.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1874#Go/github.com/corazawaf/coraza/v3","url":"https://osv.dev/vulnerability/GO-2023-1874"}],"summary":"Denial of service in github.com/corazawaf/coraza/v2 and v3"}