{"action":"Upgrade github.com/kudelskisecurity/crystals-go to 0.0.0-20240116172146-2a6ca2d4e64d or later.","affected":[{"introduced":"0"}],"component":"github.com/kudelskisecurity/crystals-go","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20240116172146-2a6ca2d4e64d"],"ghsa_id":"GHSA-f6jh-hvg2-9525","id":"tcs_01M5KG12KT4W9V18VKK624Z83J","modified_at":"2024-06-03T20:51:31Z","published_at":"2024-01-17T19:19:52Z","references":["https://osv.dev/vulnerability/GO-2024-2469","https://github.com/kudelskisecurity/crystals-go/security/advisories/GHSA-f6jh-hvg2-9525","https://github.com/kudelskisecurity/crystals-go/pull/20","https://github.com/kudelskisecurity/crystals-go/pull/21","https://github.com/kudelskisecurity/crystals-go/issues/19"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2469","url":"https://osv.dev/vulnerability/GO-2024-2469"}],"summary":"Kyberslash timing attack possible in github.com/kudelskisecurity/crystals-go"}