{"action":"Upgrade github.com/neuvector/neuvector to 0.0.0-20231003121714-be746957ee7c or later.","affected":[{"introduced":"0"}],"component":"github.com/neuvector/neuvector","cve_ids":["CVE-2023-22644"],"ecosystem":"Go","epss":0.00456,"exploited":false,"fixed_versions":["0.0.0-20231003121714-be746957ee7c"],"id":"tcs_01M5KG5MZ5J5AAJ8D71FMQ6302","modified_at":"2026-05-04T08:57:06.352918879Z","published_at":"2024-10-15T15:42:40Z","references":["https://osv.dev/vulnerability/GO-2024-3201","https://nvd.nist.gov/vuln/detail/CVE-2023-22644","https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32188","https://github.com/neuvector/neuvector/security/advisories/GHSA-622h-h2p8-743x"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3201","url":"https://osv.dev/vulnerability/GO-2024-3201"}],"summary":"JWT token compromise can allow malicious actions including Remote Code Execution (RCE) in github.com/neuvector/neuvector"}