{"action":"Upgrade github.com/hashicorp/boundary to 0.19.5 or later.","affected":[{"fixed":"0.19.5","introduced":"0"},{"fixed":"0.20.3","introduced":"0.20.0"},{"fixed":"0.21.3","introduced":"0.21.0"}],"component":"github.com/hashicorp/boundary","cve_ids":["CVE-2026-7776"],"ecosystem":"Go","epss":0.002,"exploited":false,"fixed_versions":["0.19.5","0.20.3","0.21.3"],"ghsa_id":"GHSA-7x9r-wcgg-w86f","id":"tcs_01M5KGJVVEXGQZFTPG8WSCHXDG","modified_at":"2026-06-25T19:45:19.158777685Z","published_at":"2026-06-25T18:43:15Z","references":["https://osv.dev/vulnerability/GO-2026-5237","https://github.com/advisories/GHSA-7x9r-wcgg-w86f","https://nvd.nist.gov/vuln/detail/CVE-2026-7776","https://discuss.hashicorp.com/t/hcsec-2026-11-boundary-workers-vulnerable-to-denial-of-service-during-tls-handshake"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GO-2026-5237","url":"https://osv.dev/vulnerability/GO-2026-5237"},{"source":"nvd","source_id":"CVE-2026-7776","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-7776"}],"summary":"Hashicorp Boundary workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes in github.com/hashicorp/boundary"}