{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/OliveTin/OliveTin","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xx6g-43w2-9g6g","id":"tcs_01M5KGF8B8DDZ1EZTY46J9JDJG","modified_at":"2026-03-23T04:52:55.359606Z","published_at":"2026-03-12T20:57:37Z","references":["https://osv.dev/vulnerability/GO-2026-4687","https://github.com/OliveTin/OliveTin/security/advisories/GHSA-xx6g-43w2-9g6g","https://github.com/OliveTin/OliveTin/commit/bc5e9fbe1e22ff87a4b277cb56605a46a10e561a","https://github.com/OliveTin/OliveTin/releases/tag/3000.11.3"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4687","url":"https://osv.dev/vulnerability/GO-2026-4687"}],"summary":"OliveTin's email argument makes compliance harder, enables log injection in github.com/OliveTin/OliveTin"}