{"id":"GHSA-wxwq-525w-hcqx","aliases":["GO-2023-1607"],"status":"published","title":"Yapscan Denial of Service vulnerability in report server","description":"### Impact\n\nIf you use the report server, it may be vulnerable to a Denial of Service attack.\n\n### Patches\n\nHas been patched in v0.19.2.\n\n### References\n\nThe vulnerability was inherited by the following upstream vulnerabilites\n\n- [golang.org/x/text \u003c v0.3.7](https://github.com/advisories/GHSA-ppp9-7jff-5vj2)\n- [golang.org/x/net \u003c 0.0.0-20220906165146-f3363e06e74c](https://github.com/advisories/GHSA-69cg-p879-7622)","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-03-03T23:05:28Z","modified":"2026-03-03T04:53:23Z","fixes":[{"ecosystem":"Go","package":"github.com/fkie-cad/yapscan","fixed_in":["0.19.2"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/fkie-cad/yapscan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.18.0"},{"fixed":"0.19.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/fkie-cad/yapscan","ranges":[{"type":"SEMVER","events":[{"introduced":"0.18.0"},{"fixed":"0.19.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/fkie-cad/yapscan","ranges":[{"type":"SEMVER","events":[{"introduced":"0.18.0"},{"fixed":"0.19.2"}]}]}],"references":[{"url":"https://github.com/fkie-cad/yapscan/security/advisories/GHSA-wxwq-525w-hcqx","tags":["web","advisory"]},{"url":"https://github.com/fkie-cad/yapscan/pull/46","tags":["web","fix"]},{"url":"https://github.com/fkie-cad/yapscan/commit/242b4b25b107deacddd4ca276b45d23e16bb3b88","tags":["web","fix"]},{"url":"https://github.com/fkie-cad/yapscan/commit/65f277662c6475eb3f592e0e4fdfee902ecd9326","tags":["web","fix"]},{"url":"https://github.com/advisories/GHSA-69cg-p879-7622","tags":["advisory","web"]},{"url":"https://github.com/advisories/GHSA-ppp9-7jff-5vj2","tags":["advisory","web"]},{"url":"https://github.com/fkie-cad/yapscan/releases/tag/v0.19.2","tags":["web"]},{"url":"https://github.com/advisories/GHSA-wxwq-525w-hcqx"},{"url":"https://github.com/fkie-cad/yapscan","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-wxwq-525w-hcqx","title":"Yapscan Denial of Service vulnerability in report server","description":"### Impact\n\nIf you use the report server, it may be vulnerable to a Denial of Service attack.\n\n### Patches\n\nHas been patched in v0.19.2.\n\n### References\n\nThe vulnerability was inherited by the following upstream vulnerabilites\n\n- [golang.org/x/text \u003c v0.3.7](https://github.com/advisories/GHSA-ppp9-7jff-5vj2)\n- [golang.org/x/net \u003c 0.0.0-20220906165146-f3363e06e74c](https://github.com/advisories/GHSA-69cg-p879-7622)\n","status":"published","published":"2023-03-03T23:05:28Z","modified":"2023-03-03T23:05:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T14:36:46.526285Z"}],"osv":[{"id":"GHSA-wxwq-525w-hcqx","title":"Yapscan Denial of Service vulnerability in report server","description":"### Impact\n\nIf you use the report server, it may be vulnerable to a Denial of Service attack.\n\n### Patches\n\nHas been patched in v0.19.2.\n\n### References\n\nThe vulnerability was inherited by the following upstream vulnerabilites\n\n- [golang.org/x/text \u003c v0.3.7](https://github.com/advisories/GHSA-ppp9-7jff-5vj2)\n- [golang.org/x/net \u003c 0.0.0-20220906165146-f3363e06e74c](https://github.com/advisories/GHSA-69cg-p879-7622)\n","status":"published","published":"2023-03-03T23:05:28Z","modified":"2024-08-20T20:59:07.092833Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:59.131095Z"},{"id":"GO-2023-1607","title":"Yapscan Denial of Service vulnerability in report server in github.com/fkie-cad/yapscan","description":"Yapscan Denial of Service vulnerability in report server in github.com/fkie-cad/yapscan","status":"published","published":"2024-08-20T20:29:14Z","modified":"2026-03-03T04:53:23.2757Z","updated_at":"2026-11-02T15:47:01.185262Z"}]}}