{"action":"Upgrade github.com/projectdiscovery/nuclei/v2 to 2.9.9 or later.","affected":[{"fixed":"2.9.9","introduced":"0"}],"component":"github.com/projectdiscovery/nuclei/v2","cve_ids":["CVE-2023-37896"],"ecosystem":"Go","epss":0.01048,"exploited":false,"fixed_versions":["2.9.9"],"ghsa_id":"GHSA-2xx4-jj5v-6mff","id":"tcs_01M5KFZYM7BMAC2SEWSCPNARVV","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-08-23T14:38:50Z","references":["https://osv.dev/vulnerability/GO-2023-1998","https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-2xx4-jj5v-6mff","https://github.com/projectdiscovery/nuclei/pull/3927","https://github.com/projectdiscovery/nuclei/releases/tag/v2.9.9"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1998","url":"https://osv.dev/vulnerability/GO-2023-1998"}],"summary":"Improper path sanitization in sandbox mode in github.com/projectdiscovery/nuclei/v2"}