{"action":"Upgrade golang.org/x/image to 0.45.0 or later.","affected":[{"fixed":"0.45.0","introduced":"0"}],"component":"golang.org/x/image","cve_ids":["CVE-2026-46603"],"ecosystem":"Go","epss":0.00412,"exploited":false,"fixed_versions":["0.45.0"],"id":"tcs_01M5KGSJ2FEQGMBJW1AYE9NVS3","modified_at":"2026-08-15T09:41:53.891904586Z","published_at":"2026-08-14T16:22:50Z","references":["https://osv.dev/vulnerability/GO-2026-6222","https://go.dev/issue/80069","https://go.dev/cl/793460"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6222","url":"https://osv.dev/vulnerability/GO-2026-6222"}],"summary":"Excessive memory allocation during VP8L decoding in golang.org/x/image"}