{"action":"Upgrade github.com/kiali/kiali to 1.57.4 or later.","affected":[{"fixed":"1.57.4","introduced":"0"}],"component":"github.com/kiali/kiali","cve_ids":["CVE-2022-3962"],"ecosystem":"Go","epss":0.00738,"exploited":false,"fixed_versions":["1.57.4"],"ghsa_id":"GHSA-6f4m-j56w-55c3","id":"tcs_01M5KG0A1QC3RQS3G3TB6GDA66","modified_at":"2026-02-04T03:07:42.373897Z","published_at":"2024-08-21T14:30:18Z","references":["https://osv.dev/vulnerability/GO-2023-2075","https://github.com/advisories/GHSA-6f4m-j56w-55c3","https://nvd.nist.gov/vuln/detail/CVE-2022-3962","https://github.com/kiali/kiali/commit/aab7694f850f04d7fd875fac5f720a93ccdf01ad","https://access.redhat.com/errata/RHSA-2023:0542","https://access.redhat.com/security/cve/CVE-2022-3962","https://bugzilla.redhat.com/show_bug.cgi?id=2148661","https://issues.redhat.com/browse/OSSM-2251?attachmentViewMode=list"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-2075","url":"https://osv.dev/vulnerability/GO-2023-2075"}],"summary":"Kiali content spoofing vulnerability in github.com/kiali/kiali"}