{"action":"Upgrade github.com/ipfs/go-ipfs to 0.7.0 or later.","affected":[{"fixed":"0.7.0","introduced":"0"}],"component":"github.com/ipfs/go-ipfs","cve_ids":["CVE-2020-10937"],"ecosystem":"Go","epss":0.01161,"exploited":false,"fixed_versions":["0.7.0"],"ghsa_id":"GHSA-r23h-3jmw-q7hr","id":"tcs_01M5KG2TXVF83GKKRVAXST33MX","modified_at":"2026-03-03T04:55:15.263970Z","published_at":"2024-06-04T15:19:21Z","references":["https://osv.dev/vulnerability/GO-2024-2779","https://github.com/advisories/GHSA-r23h-3jmw-q7hr","https://nvd.nist.gov/vuln/detail/CVE-2020-10937","https://blog.ipfs.io/2020-10-30-dht-hardening","https://graz.pure.elsevier.com/en/publications/total-eclipse-of-the-heart-disrupting-the-interplanetary-file-sys"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2779","url":"https://osv.dev/vulnerability/GO-2024-2779"}],"summary":"Access Restriction Bypass in go-ipfs in github.com/ipfs/go-ipfs"}