{"action":"Upgrade tailscale to 1.32.3-r0 or later.","affected":[{"fixed":"1.32.3-r0","introduced":"0"}],"component":"tailscale","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.24","exploited":false,"fixed_versions":["1.32.3-r0"],"id":"tcs_01M6HH95KE3G1XPBN9YADZ3MX5","modified_at":"2026-11-03T07:30:56.184898671Z","published_at":"2022-11-23T19:15:12.487Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2022-41925","https://security.alpinelinux.org/vuln/CVE-2022-41925"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2022-41925","url":"https://osv.dev/vulnerability/ALPINE-CVE-2022-41925"}],"summary":"A vulnerability identified in the Tailscale client allows a malicious website to access the peer API, which can then be used to access Tailscale environment variables. In the Tailscale client, the pee"}