Go/github.com/openshift/must-gather CVE-2024-25131: high 8.8, EPSS 0.76%

OpenShift Must Gather Operator Improper Input Validation vulnerability

Action: Upgrade github.com/openshift/must-gather to 0.0.0-20240604173837-d1557bc283dd or later.

go get github.com/openshift/must-gather@v0.0.0-20240604173837-d1557bc283dd

Affected

Fixed versions

Sources

• osv: GHSA-77c2-c35q-254w
• https://nvd.nist.gov/vuln/detail/CVE-2024-25131
• https://github.com/openshift/must-gather-operator/pull/135
• https://github.com/openshift/must-gather-operator/pull/138
• https://access.redhat.com/security/cve/CVE-2024-25131
• https://bugzilla.redhat.com/show_bug.cgi?id=2258856
• https://github.com/openshift/must-gather-operator

CVE-2024-25131 · published 2024-12-19T15:31:11Z · modified 2024-12-20T21:13:15.956411Z · JSON