[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-1996":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":30,"duplicate_of":9,"upstream":33,"downstream":34,"duplicates":79,"related":80,"reserved_at":9,"published_at":108,"modified_at":109,"state":110,"summary":111,"references_raw":119,"kevs":233,"epss":234,"epss_history":237,"metrics":502,"affected":521},"CVE-2022-1996","Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-639","Authorization Bypass Through User-Controlled Key","The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.","weakness","Incomplete","Base","High",[],[21],{"_key":22,"name":23,"source":24,"url":25,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":29,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_C297CCB2D8D7AA3A","Exploit Reference (huntr.dev)","reference","https://huntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1","unknown",0.2,false,[],[31,32],"GHSA-r48q-9g5r-8q2h","GO-2022-0619",[],[35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77],{"_key":36},"SUSE-SU-2024:0799-1",{"_key":38},"SUSE-SU-2022:3335-1",{"_key":40},"OPENSUSE-SU-2022:10081-1",{"_key":42},"SUSE-SU-2022:3321-1",{"_key":44},"SUSE-SU-2022:3333-1",{"_key":46},"SUSE-SU-2022:3334-1",{"_key":48},"SUSE-SU-2022:3666-1",{"_key":50},"SUSE-SU-2022:4606-1",{"_key":52},"SUSE-SU-2023:4727-1",{"_key":54},"SUSE-SU-2024:3221-1",{"_key":56},"SUSE-SU-2024:4329-1",{"_key":58},"OPENSUSE-SU-2022:10094-1",{"_key":60},"OPENSUSE-SU-2024:12205-1",{"_key":62},"OPENSUSE-SU-2024:12252-1",{"_key":64},"OPENSUSE-SU-2024:14081-1",{"_key":66},"OPENSUSE-SU-2025:15779-1",{"_key":68},"RHSA-2023:3229",{"_key":70},"RHSA-2023:3557",{"_key":72},"SUSE-SU-2025:20091-1",{"_key":74},"DEBIAN-CVE-2022-1996",{"_key":76},"UBUNTU-CVE-2022-1996",{"_key":78},"RHSA-2022:6042",[],[81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,100,102,104,106],{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":52},{"_key":54},{"_key":56},{"_key":58},{"_key":60},{"_key":62},{"_key":64},{"_key":66},{"_key":72},{"_key":99},"CGA-2RGH-QX5W-V4MH",{"_key":101},"CGA-F3FG-XC4J-F74V",{"_key":103},"CGA-H52J-4278-C4G3",{"_key":105},"CGA-MV9Q-7P6C-WVXG",{"_key":107},"CGA-HG94-JM75-6758","2022-06-06T00:00:00.000Z","2024-08-03T00:24:43.677Z","Modified",{"cisa_kev":28,"cisa_ransomware":28,"cisa_vendor":9,"epss_severity":112,"epss_score":113,"severity":114,"severity_score":115,"severity_version":116,"severity_source":117,"severity_vector":118,"severity_status":110},"low",0.00963,"critical",9.3,"v3.0","cve.org","CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",[120,129,133,138,142,146,150,154,158,162,166,170,175,179,183,188,192,196,200,204,208,212,216,220,224,228],{"url":25,"sources":121,"tags":124},[117,122,123],"nvd","osv_go",[125,126,127,128],"Exploit","Patch","Third Party Advisory","WEB",{"url":130,"sources":131,"tags":132},"https://github.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10",[117,122,123],[126,127,128],{"url":134,"sources":135,"tags":136},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBDD3Q23RCGAGHIXUCWBU6N3S4RNAKXB/",[117,122],[137],"Vendor Advisory",{"url":139,"sources":140,"tags":141},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/575BLJ3Y2EQBRNTFR2OSQQ6L2W6UCST3/",[117,122],[137],{"url":143,"sources":144,"tags":145},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/",[117,122],[137],{"url":147,"sources":148,"tags":149},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/",[117,122],[137],{"url":151,"sources":152,"tags":153},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/",[117,122],[137],{"url":155,"sources":156,"tags":157},"https://security.netapp.com/advisory/ntap-20220923-0005/",[117,122],[127],{"url":159,"sources":160,"tags":161},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56PP46JVZEKCANBKXFKRVSBBRRMCY6V/",[117,122],[137],{"url":163,"sources":164,"tags":165},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGQKWD6SE75PFBPFVSZYAKAVXKBZXKWS/",[117,122],[137],{"url":167,"sources":168,"tags":169},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SO5QC2JFW2PXBWAE27OYYYL5SPFUBHTY/",[117,122],[137],{"url":171,"sources":172,"tags":173},"https://nvd.nist.gov/vuln/detail/CVE-2022-1996",[123],[174],"Advisory",{"url":176,"sources":177,"tags":178},"https://github.com/emicklei/go-restful/issues/489",[123],[128],{"url":180,"sources":181,"tags":182},"https://github.com/emicklei/go-restful/commit/926662532deb450272956c7bc573978464aae74e",[123],[128],{"url":184,"sources":185,"tags":186},"https://github.com/emicklei/go-restful/commit/f292efff46ae17e9d104f865a60a39a2ae9402f1",[123],[128,187],"FIX",{"url":189,"sources":190,"tags":191},"https://security.netapp.com/advisory/ntap-20220923-0005",[123],[128],{"url":193,"sources":194,"tags":195},"https://pkg.go.dev/vuln/GO-2022-0619",[123],[128],{"url":197,"sources":198,"tags":199},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR",[123],[128],{"url":201,"sources":202,"tags":203},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGQKWD6SE75PFBPFVSZYAKAVXKBZXKWS",[123],[128],{"url":205,"sources":206,"tags":207},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5",[123],[128],{"url":209,"sources":210,"tags":211},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W56PP46JVZEKCANBKXFKRVSBBRRMCY6V",[123],[128],{"url":213,"sources":214,"tags":215},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SO5QC2JFW2PXBWAE27OYYYL5SPFUBHTY",[123],[128],{"url":217,"sources":218,"tags":219},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6",[123],[128],{"url":221,"sources":222,"tags":223},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OBDD3Q23RCGAGHIXUCWBU6N3S4RNAKXB",[123],[128],{"url":225,"sources":226,"tags":227},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/575BLJ3Y2EQBRNTFR2OSQQ6L2W6UCST3",[123],[128],{"url":229,"sources":230,"tags":231},"https://github.com/emicklei/go-restful",[123],[232],"PACKAGE",[],{"date":235,"score":113,"percentile":236},"2026-06-04",0.76881,[238,242,245,248,251,254,257,260,263,266,269,272,275,278,280,284,287,290,293,296,299,302,305,308,311,314,316,319,322,325,328,331,334,337,339,342,345,348,351,354,357,360,363,366,369,372,375,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,432,435,438,441,444,447,449,452,454,457,460,463,466,468,471,473,476,479,482,485,487,490,493,496,499],{"date":239,"score":240,"percentile":241},"2025-11-04",0.00914,0.75137,{"date":243,"score":240,"percentile":244},"2025-11-05",0.75129,{"date":246,"score":240,"percentile":247},"2025-11-06",0.75127,{"date":249,"score":240,"percentile":250},"2025-11-07",0.75145,{"date":252,"score":240,"percentile":253},"2025-11-08",0.75146,{"date":255,"score":240,"percentile":256},"2025-11-09",0.75142,{"date":258,"score":240,"percentile":259},"2025-11-10",0.75126,{"date":261,"score":240,"percentile":262},"2025-11-11",0.75128,{"date":264,"score":240,"percentile":265},"2025-11-12",0.75148,{"date":267,"score":240,"percentile":268},"2025-11-13",0.75154,{"date":270,"score":240,"percentile":271},"2025-11-14",0.75158,{"date":273,"score":240,"percentile":274},"2025-11-15",0.75157,{"date":276,"score":240,"percentile":277},"2025-11-16",0.75156,{"date":279,"score":240,"percentile":253},"2025-11-17",{"date":281,"score":282,"percentile":283},"2025-11-18",0.02418,0.83786,{"date":285,"score":282,"percentile":286},"2025-11-19",0.83789,{"date":288,"score":282,"percentile":289},"2025-11-20",0.83794,{"date":291,"score":240,"percentile":292},"2025-11-21",0.7517,{"date":294,"score":240,"percentile":295},"2025-11-22",0.75166,{"date":297,"score":240,"percentile":298},"2025-11-23",0.75153,{"date":300,"score":240,"percentile":301},"2025-11-24",0.7515,{"date":303,"score":240,"percentile":304},"2025-11-25",0.75152,{"date":306,"score":240,"percentile":307},"2025-11-26",0.75159,{"date":309,"score":240,"percentile":310},"2025-11-27",0.7516,{"date":312,"score":240,"percentile":313},"2025-11-28",0.75147,{"date":315,"score":240,"percentile":250},"2025-11-29",{"date":317,"score":113,"percentile":318},"2025-11-30",0.75814,{"date":320,"score":113,"percentile":321},"2025-12-01",0.75942,{"date":323,"score":113,"percentile":324},"2025-12-02",0.75949,{"date":326,"score":113,"percentile":327},"2025-12-03",0.75939,{"date":329,"score":113,"percentile":330},"2025-12-04",0.75808,{"date":332,"score":113,"percentile":333},"2025-12-05",0.75817,{"date":335,"score":113,"percentile":336},"2025-12-06",0.7582,{"date":338,"score":113,"percentile":333},"2025-12-07",{"date":340,"score":113,"percentile":341},"2025-12-08",0.75822,{"date":343,"score":113,"percentile":344},"2025-12-09",0.75848,{"date":346,"score":113,"percentile":347},"2025-12-10",0.75873,{"date":349,"score":113,"percentile":350},"2025-12-11",0.75892,{"date":352,"score":113,"percentile":353},"2025-12-12",0.75915,{"date":355,"score":113,"percentile":356},"2025-12-13",0.75917,{"date":358,"score":113,"percentile":359},"2025-12-14",0.75913,{"date":361,"score":113,"percentile":362},"2025-12-15",0.75911,{"date":364,"score":113,"percentile":365},"2025-12-16",0.75923,{"date":367,"score":113,"percentile":368},"2025-12-17",0.75935,{"date":370,"score":113,"percentile":371},"2025-12-18",0.75953,{"date":373,"score":113,"percentile":374},"2025-12-19",0.75968,{"date":376,"score":113,"percentile":377},"2025-12-20",0.7596,{"date":379,"score":113,"percentile":380},"2025-12-21",0.75955,{"date":382,"score":113,"percentile":383},"2025-12-22",0.75952,{"date":385,"score":113,"percentile":386},"2025-12-23",0.7595,{"date":388,"score":113,"percentile":389},"2025-12-24",0.75958,{"date":391,"score":113,"percentile":392},"2025-12-25",0.75979,{"date":394,"score":113,"percentile":395},"2025-12-26",0.75977,{"date":397,"score":113,"percentile":398},"2025-12-27",0.76034,{"date":400,"score":113,"percentile":401},"2025-12-28",0.75961,{"date":403,"score":113,"percentile":404},"2025-12-29",0.75957,{"date":406,"score":113,"percentile":407},"2025-12-30",0.75969,{"date":409,"score":113,"percentile":410},"2025-12-31",0.7599,{"date":412,"score":113,"percentile":413},"2026-01-01",0.76128,{"date":415,"score":113,"percentile":416},"2026-01-02",0.76131,{"date":418,"score":113,"percentile":419},"2026-01-03",0.7613,{"date":421,"score":113,"percentile":422},"2026-01-04",0.75997,{"date":424,"score":113,"percentile":425},"2026-01-05",0.75989,{"date":427,"score":113,"percentile":428},"2026-01-06",0.76,{"date":430,"score":113,"percentile":431},"2026-01-07",0.76009,{"date":433,"score":113,"percentile":434},"2026-01-08",0.7602,{"date":436,"score":113,"percentile":437},"2026-01-09",0.76027,{"date":439,"score":113,"percentile":440},"2026-01-10",0.76029,{"date":442,"score":113,"percentile":443},"2026-01-11",0.76014,{"date":445,"score":113,"percentile":446},"2026-01-12",0.76001,{"date":448,"score":113,"percentile":428},"2026-01-13",{"date":450,"score":113,"percentile":451},"2026-01-14",0.76028,{"date":453,"score":113,"percentile":398},"2026-01-15",{"date":455,"score":113,"percentile":456},"2026-01-16",0.76046,{"date":458,"score":113,"percentile":459},"2026-01-17",0.76045,{"date":461,"score":113,"percentile":462},"2026-01-18",0.76036,{"date":464,"score":113,"percentile":465},"2026-01-19",0.76032,{"date":467,"score":113,"percentile":465},"2026-01-20",{"date":469,"score":113,"percentile":470},"2026-01-21",0.76039,{"date":472,"score":113,"percentile":459},"2026-01-22",{"date":474,"score":113,"percentile":475},"2026-01-23",0.76072,{"date":477,"score":113,"percentile":478},"2026-01-24",0.76081,{"date":480,"score":113,"percentile":481},"2026-01-25",0.76068,{"date":483,"score":113,"percentile":484},"2026-01-26",0.76066,{"date":486,"score":113,"percentile":484},"2026-01-27",{"date":488,"score":113,"percentile":489},"2026-01-28",0.76074,{"date":491,"score":113,"percentile":492},"2026-01-29",0.7607,{"date":494,"score":113,"percentile":495},"2026-01-30",0.76076,{"date":497,"score":113,"percentile":498},"2026-01-31",0.76075,{"date":500,"score":113,"percentile":501},"2026-02-01",0.76199,[503,508,519],{"source":117,"cvss_v2_0":9,"cvss_v3_0":504,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":115,"baseSeverity":505,"vectorString":118,"impactScore":506,"exploitabilityScore":507},"CRITICAL",9.7,7.2,{"source":122,"cvss_v2_0":509,"cvss_v3_0":514,"cvss_v3_1":515,"cvss_v4_0":9},{"baseScore":510,"baseSeverity":9,"vectorString":511,"impactScore":512,"exploitabilityScore":513},6.4,"AV:N/AC:L/Au:N/C:P/I:P/A:N",4.9,10,{"baseScore":115,"baseSeverity":505,"vectorString":118,"impactScore":506,"exploitabilityScore":507},{"baseScore":516,"baseSeverity":505,"vectorString":517,"impactScore":518,"exploitabilityScore":513},9.1,"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",8.7,{"source":123,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":520,"cvss_v4_0":9},{"baseScore":516,"baseSeverity":9,"vectorString":517,"impactScore":518,"exploitabilityScore":513},[522,534,544,555,567,576],{"ecosystem":9,"name":523,"vendor":524,"product":523,"cpe_part":525,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":526},"emicklei/go-restful","emicklei","a",[527],{"version":528,"is_range":529,"range_type":117,"version_start":530,"version_start_type":531,"version_end":532,"version_end_type":533,"fixed_in":9},">= unspecified, \u003C v3.8.0",true,"unspecified","including","v3.8.0","excluding",{"ecosystem":9,"name":535,"vendor":536,"product":535,"cpe_part":537,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":538},"fedora","fedoraproject","o",[539,542],{"version":540,"is_range":28,"range_type":541,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"35","cpe",{"version":543,"is_range":28,"range_type":541,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"36",{"ecosystem":9,"name":545,"vendor":546,"product":545,"cpe_part":525,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":547},"go-restful","go-restful_project",[548,551],{"version":549,"is_range":529,"range_type":541,"version_start":9,"version_start_type":9,"version_end":550,"version_end_type":533,"fixed_in":9},"lt2.16.0","2.16.0",{"version":552,"is_range":529,"range_type":541,"version_start":553,"version_start_type":531,"version_end":554,"version_end_type":533,"fixed_in":9},"gte3.0.0_lt3.8.0","3.0.0","3.8.0",{"ecosystem":556,"name":557,"vendor":558,"product":545,"cpe_part":9,"purl_type":559,"purl_namespace":558,"purl_name":545,"source":9,"versions":560},"Go","github.com/emicklei/go-restful","github.com/emicklei","golang",[561,564],{"version":562,"is_range":529,"range_type":563,"version_start":9,"version_start_type":9,"version_end":550,"version_end_type":533,"fixed_in":9},"lt2_16_0","semver",{"version":565,"is_range":529,"range_type":563,"version_start":9,"version_start_type":9,"version_end":566,"version_end_type":533,"fixed_in":9},"lt2_16_0+incompatible","2.16.0+incompatible",{"ecosystem":556,"name":568,"vendor":557,"product":569,"cpe_part":9,"purl_type":559,"purl_namespace":557,"purl_name":569,"source":9,"versions":570},"github.com/emicklei/go-restful/v2","v2",[571,574],{"version":572,"is_range":529,"range_type":563,"version_start":9,"version_start_type":9,"version_end":573,"version_end_type":531,"fixed_in":9},"lte2_7_1","2.7.1",{"version":575,"is_range":529,"range_type":563,"version_start":573,"version_start_type":531,"version_end":9,"version_end_type":9,"fixed_in":9},"gte2_7_1",{"ecosystem":556,"name":577,"vendor":557,"product":578,"cpe_part":9,"purl_type":559,"purl_namespace":557,"purl_name":578,"source":9,"versions":579},"github.com/emicklei/go-restful/v3","v3",[580],{"version":581,"is_range":529,"range_type":563,"version_start":553,"version_start_type":531,"version_end":554,"version_end_type":533,"fixed_in":9},"gte3_0_0_lt3_8_0"]