{"action":"Upgrade github.com/filecoin-project/go-f3 to 0.8.9 or later.","affected":[{"fixed":"0.8.9","introduced":"0"}],"component":"github.com/filecoin-project/go-f3","cve_ids":["CVE-2025-59941"],"ecosystem":"Go","epss":0.00245,"exploited":false,"fixed_versions":["0.8.9"],"ghsa_id":"GHSA-7pq9-rf9p-wcrf","id":"tcs_01M5KGANYCM48DV1JCBYFCRWRN","modified_at":"2026-03-03T04:56:57.687896Z","published_at":"2025-10-23T16:25:09Z","references":["https://osv.dev/vulnerability/GO-2025-3989","https://github.com/filecoin-project/go-f3/security/advisories/GHSA-7pq9-rf9p-wcrf","https://nvd.nist.gov/vuln/detail/CVE-2025-59941","https://github.com/filecoin-project/go-f3/commit/76fff18cf07b21baccf537024bdb2fb41f75f6e2#diff-e1f646cea41790e1642e4e649c9e3c526344736d67222201703e1c29c23e9625"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GO-2025-3989","url":"https://osv.dev/vulnerability/GO-2025-3989"},{"source":"nvd","source_id":"CVE-2025-59941","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-59941"}],"summary":"go-f3 Vulnerable to Cached Justification Verification Bypass in github.com/filecoin-project/go-f3"}