id: GO-2022-1002
modules:
    - module: github.com/pandatix/go-cvss
      versions:
        - introduced: 0.2.0
          fixed: 0.4.0
      vulnerable_at: 0.3.0
      packages:
        - package: github.com/pandatix/go-cvss/20
          symbols:
            - ParseVector
summary: Panic in github.com/pandatix/go-cvss
description: ParseVector can panic when provided with invalid input.
cves:
    - CVE-2022-39213
ghsas:
    - GHSA-xhmf-mmv2-4hhx
references:
    - fix: https://github.com/pandatix/go-cvss/commit/d9d478ff0c13b8b09ace030db9262f3c2fe031f4