{"action":"Upgrade knative.dev/eventing-github to 0.39.1 or later.","affected":[{"fixed":"0.39.1","introduced":"0"}],"component":"knative.dev/eventing-github","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.39.1"],"ghsa_id":"GHSA-v7hc-87jc-qrrr","id":"tcs_01M5KG0SJTJ5EYBGG228Y7C1C9","modified_at":"2026-03-03T04:55:09.917706Z","published_at":"2024-08-21T14:30:24Z","references":["https://osv.dev/vulnerability/GO-2023-2388","https://github.com/knative-extensions/eventing-github/security/advisories/GHSA-v7hc-87jc-qrrr","https://github.com/knative-extensions/eventing-github/commit/ea5cb8b25fc3410dde45ce2eb95454e4cfe77c40","https://github.com/knative-extensions/eventing-github/pull/442","https://github.com/knative-extensions/eventing-github/pull/446","https://github.com/knative-extensions/eventing-github/pull/447"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-2388","url":"https://osv.dev/vulnerability/GO-2023-2388"}],"summary":"eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations in knative.dev/eventing-github"}