{"action":"Upgrade github.com/gofiber/fiber/v2 to 2.49.2-0.20230906112033-b8c9ede6efa2 or later.","affected":[{"fixed":"2.49.2-0.20230906112033-b8c9ede6efa2","introduced":"0"}],"component":"github.com/gofiber/fiber/v2","cve_ids":["CVE-2023-41338"],"ecosystem":"Go","epss":0.00655,"exploited":false,"fixed_versions":["2.49.2-0.20230906112033-b8c9ede6efa2"],"ghsa_id":"GHSA-3q5p-3558-364f","id":"tcs_01M5KG04B4E1BM115K4SPMKD7G","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-09-12T17:31:22Z","references":["https://osv.dev/vulnerability/GO-2023-2052","https://github.com/gofiber/fiber/security/advisories/GHSA-3q5p-3558-364f","https://github.com/gofiber/fiber/commit/b8c9ede6efa231116c4bd8bb9d5e03eac1cb76dc"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-2052","url":"https://osv.dev/vulnerability/GO-2023-2052"}],"summary":"IsFromLocal local address check can be circumvented in github.com/gofiber/fiber/v2"}