{"action":"Upgrade github.com/lf-edge/eve to 0.0.0-20230519072751-977f42b07fa9 or later.","affected":[{"introduced":"0"}],"component":"github.com/lf-edge/eve","cve_ids":["CVE-2023-43634"],"ecosystem":"Go","epss":0.00171,"exploited":false,"fixed_versions":["0.0.0-20230519072751-977f42b07fa9"],"ghsa_id":"GHSA-wc42-fcjp-v8vq","id":"tcs_01M5KGDQMD46FXJ5BK7X6S0JRP","modified_at":"2026-02-05T04:11:08.452498Z","published_at":"2026-02-05T03:20:48Z","references":["https://osv.dev/vulnerability/GO-2026-4432","https://github.com/lf-edge/eve/security/advisories/GHSA-wc42-fcjp-v8vq","https://nvd.nist.gov/vuln/detail/CVE-2023-43634","https://asrg.io/security-advisories/config-partition-not-protected-by-measured-boot","https://asrg.io/security-advisories/cve-2023-43634"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4432","url":"https://osv.dev/vulnerability/GO-2026-4432"}],"summary":"EVE Doesn't Protect Config Partition with Measured Boot in github.com/lf-edge/eve"}