id: GO-2022-0381
modules:
    - module: github.com/google/exposure-notifications-server
      versions:
        - fixed: 0.18.3
        - introduced: 0.19.0
        - fixed: 0.19.2
      vulnerable_at: 0.19.1
summary: Import of incorrectly embargoed keys could cause early publication in github.com/google/exposure-notifications-server
ghsas:
    - GHSA-3wxm-m9m4-cprj
references:
    - advisory: https://github.com/google/exposure-notifications-server/security/advisories/GHSA-3wxm-m9m4-cprj
source:
    id: GHSA-3wxm-m9m4-cprj
    created: 2024-08-20T13:52:58.070049-04:00
review_status: UNREVIEWED
unexcluded: EFFECTIVELY_PRIVATE