{"action":"Upgrade tech.kwik:kwik to 0.8 or later.","affected":[{"fixed":"0.8","introduced":"0"}],"component":"tech.kwik:kwik","cve_ids":["CVE-2024-22588"],"ecosystem":"Maven","epss":0.00324,"exploited":false,"fixed_versions":["0.8"],"ghsa_id":"GHSA-w8cp-frxc-55pj","id":"tcs_01M5N9FY910RA1PBY0DAT3CN8Z","modified_at":"2024-05-24T19:27:06.982338Z","published_at":"2024-05-24T19:00:28Z","references":["https://osv.dev/vulnerability/GHSA-w8cp-frxc-55pj","https://nvd.nist.gov/vuln/detail/CVE-2024-22588","https://github.com/ptrd/kwik/issues/31","https://github.com/ptrd/kwik/commit/040b0d1327bfb0a8e35c23c2bd612a4a39b721d4","https://gist.github.com/QUICTester/29a1851c2b2a406411f688735526fe2e","https://github.com/ptrd/kwik","https://www.rfc-editor.org/rfc/rfc9001#name-discarding-unused-keys"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w8cp-frxc-55pj","url":"https://osv.dev/vulnerability/GHSA-w8cp-frxc-55pj"}],"summary":"Kwik does not discard unused encryption keys"}