{"id":"GHSA-wxwq-525w-hcqx","aliases":["GO-2023-1607"],"url":"https://o3.security/vulnerability/GHSA-wxwq-525w-hcqx","summary":"Yapscan Denial of Service vulnerability in report server","details":"### Impact\n\nIf you use the report server, it may be vulnerable to a Denial of Service attack.\n\n### Patches\n\nHas been patched in v0.19.2.\n\n### References\n\nThe vulnerability was inherited by the following upstream vulnerabilites\n\n- [golang.org/x/text < v0.3.7](https://github.com/advisories/GHSA-ppp9-7jff-5vj2)\n- [golang.org/x/net < 0.0.0-20220906165146-f3363e06e74c](https://github.com/advisories/GHSA-69cg-p879-7622)\n","published":"2023-03-03T23:05:28Z","modified":"2024-08-20T20:59:07.092833Z","cvss":{"score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Go","name":"github.com/fkie-cad/yapscan","fixedVersion":"0.19.2"}],"fix":{"url":"https://github.com/fkie-cad/yapscan/pull/46","label":"fkie-cad/yapscan#46"},"references":[{"type":"WEB","url":"https://github.com/fkie-cad/yapscan/security/advisories/GHSA-wxwq-525w-hcqx"},{"type":"WEB","url":"https://github.com/fkie-cad/yapscan/pull/46"},{"type":"WEB","url":"https://github.com/fkie-cad/yapscan/commit/242b4b25b107deacddd4ca276b45d23e16bb3b88"},{"type":"WEB","url":"https://github.com/fkie-cad/yapscan/commit/65f277662c6475eb3f592e0e4fdfee902ecd9326"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-69cg-p879-7622"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-ppp9-7jff-5vj2"},{"type":"PACKAGE","url":"https://github.com/fkie-cad/yapscan"},{"type":"WEB","url":"https://github.com/fkie-cad/yapscan/releases/tag/v0.19.2"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-08-20T20:59:07.092833Z"}}