| id: GO-2022-0381 |
| modules: |
| - module: github.com/google/exposure-notifications-server |
| versions: |
| - fixed: 0.18.3 |
| - introduced: 0.19.0 |
| - fixed: 0.19.2 |
| vulnerable_at: 0.19.1 |
| summary: Import of incorrectly embargoed keys could cause early publication in github.com/google/exposure-notifications-server |
| ghsas: |
| - GHSA-3wxm-m9m4-cprj |
| references: |
| - advisory: https://github.com/google/exposure-notifications-server/security/advisories/GHSA-3wxm-m9m4-cprj |
| source: |
| id: GHSA-3wxm-m9m4-cprj |
| created: 2024-08-20T13:52:58.070049-04:00 |
| review_status: UNREVIEWED |
| unexcluded: EFFECTIVELY_PRIVATE |