modules:
  - module: github.com/pandatix/go-cvss
    versions:
      - introduced: 0.2.0
        fixed: 0.4.0
    vulnerable_at: 0.3.0
    packages:
      - package: github.com/pandatix/go-cvss/20
        symbols:
          - ParseVector
description: |
    ParseVector can panic when provided with invalid input.
cves:
  - CVE-2022-39213
ghsas:
  - GHSA-xhmf-mmv2-4hhx
references:
  - fix: https://github.com/pandatix/go-cvss/commit/d9d478ff0c13b8b09ace030db9262f3c2fe031f4