{"action":"Upgrade github.com/lf-edge/eve to 0.0.0-20230126065759-d9383a7ee4e1 or later.","affected":[{"introduced":"0"}],"component":"github.com/lf-edge/eve","cve_ids":["CVE-2023-43630"],"ecosystem":"Go","epss":0.00113,"exploited":false,"fixed_versions":["0.0.0-20230126065759-d9383a7ee4e1"],"ghsa_id":"GHSA-phcg-h58r-gmcq","id":"tcs_01M5KGDQER3SFK25W4AGGXSRY2","modified_at":"2026-02-05T04:11:17.319320Z","published_at":"2026-02-05T03:20:48Z","references":["https://osv.dev/vulnerability/GO-2026-4430","https://github.com/lf-edge/eve/security/advisories/GHSA-phcg-h58r-gmcq","https://nvd.nist.gov/vuln/detail/CVE-2023-43630","https://github.com/lf-edge/eve/commit/d9383a7ee4e1c39f5c8c6d4a63cb2ebd00695e8a","https://asrg.io/security-advisories/config-partition-not-measured-from-2-fronts","https://asrg.io/security-advisories/cve-2023-43630","https://help.zededa.com/hc/en-us/articles/43295940828827-TPM-PCR-Index-Security-Implications"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4430","url":"https://osv.dev/vulnerability/GO-2026-4430"}],"summary":"EVE Doesn't Measure Config Partition From 2 Fronts in github.com/lf-edge/eve"}