{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/pubnub/go/v5","cve_ids":["CVE-2023-26154"],"ecosystem":"Go","epss":0.00963,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5844-q3fc-56rh","id":"tcs_01M5KG0RZJ94QBBPVCM5XCVTEP","modified_at":"2026-07-07T17:56:14.430840384Z","published_at":"2024-01-02T18:32:37Z","references":["https://osv.dev/vulnerability/GO-2023-2385","https://github.com/advisories/GHSA-5844-q3fc-56rh","https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-2385#Go/github.com/pubnub/go/v5","url":"https://osv.dev/vulnerability/GO-2023-2385"}],"summary":"Insufficient entropy in AES-256-CBC in github.com/pubnub/go"}