{"action":"Upgrade github.com/imroc/req/v3 to 3.43.4 or later.","affected":[{"fixed":"3.43.4","introduced":"0"}],"component":"github.com/imroc/req/v3","cve_ids":["CVE-2024-45258"],"ecosystem":"Go","epss":0.00724,"exploited":false,"fixed_versions":["3.43.4"],"ghsa_id":"GHSA-cj55-gc7m-wvcq","id":"tcs_01M5KG5649G23NBE2D79A19PX8","modified_at":"2024-09-13T22:27:42.487119Z","published_at":"2024-09-13T21:53:40Z","references":["https://osv.dev/vulnerability/GO-2024-3098","https://github.com/advisories/GHSA-cj55-gc7m-wvcq","https://github.com/imroc/req/commit/04e3ece5b380ecad9da3551c449f1b8a9aa76d3d","https://github.com/imroc/req/compare/v3.43.3...v3.43.4"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3098#Go/github.com/imroc/req/v3","url":"https://osv.dev/vulnerability/GO-2024-3098"}],"summary":"The req library may send an unintended request when a malformed URL is provided in github.com/imroc/req"}