{"action":"Upgrade golang-1.19 to 1.19~rc1-1 or later.","affected":[{"fixed":"1.19~rc1-1","introduced":"0"}],"component":"golang-1.19","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.19~rc1-1"],"id":"tcs_01M5NGR4JD471RBJHBQT68FSVG","modified_at":"2026-10-15T08:02:52.965296267Z","published_at":"2022-08-10T20:15:47.133Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-32148","https://security-tracker.debian.org/tracker/CVE-2022-32148"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-32148","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-32148"}],"summary":"Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for th"}