{"action":"Upgrade github.com/libp2p/go-libp2p to 0.27.4 or later.","affected":[{"fixed":"0.27.4","introduced":"0"}],"component":"github.com/libp2p/go-libp2p","cve_ids":["CVE-2023-40583"],"ecosystem":"Go","epss":0.00952,"exploited":false,"fixed_versions":["0.27.4"],"ghsa_id":"GHSA-gcq9-qqwx-rgj3","id":"tcs_01M5KG01DJF2DAD8ZN34RQZC10","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-09-13T16:37:01Z","references":["https://osv.dev/vulnerability/GO-2023-2024","https://github.com/libp2p/go-libp2p/security/advisories/GHSA-gcq9-qqwx-rgj3","https://github.com/libp2p/go-libp2p/commit/45d3c6fff662ddd6938982e7e9309ad5fa2ad8dd"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-2024","url":"https://osv.dev/vulnerability/GO-2023-2024"}],"summary":"Out-of-memory vulnerability in github.com/libp2p/go-libp2p"}