CVE-2024-23840
2 advisories.
Go/github.com/goreleaser/goreleaser CVE-2024-23840: medium 5.5, EPSS 0.32%
`goreleaser release --debug` shows secrets
Action: Upgrade github.com/goreleaser/goreleaser to 1.24.0 or later.
go get github.com/goreleaser/goreleaser@v1.24.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.23.0 | 1.24.0 | - |
Fixed versions
| 1.24.0 |
Sources
- osv: GHSA-h3q2-8whx-c29h
- https://github.com/goreleaser/goreleaser/security/advisories/GHSA-h3q2-8whx-c29h
- https://nvd.nist.gov/vuln/detail/CVE-2024-23840
- https://github.com/goreleaser/goreleaser/commit/d5b6a533ca1dc3366983d5d31ee2d2b6232b83c0
- https://github.com/goreleaser/goreleaser
CVE-2024-23840 · published · modified · JSON
Go/github.com/goreleaser/goreleaser CVE-2024-23840: unknown, EPSS 0.32%
Information leak in github.com/goreleaser/goreleaser
Action: Upgrade github.com/goreleaser/goreleaser to 1.24.0 or later.
go get github.com/goreleaser/goreleaser@v1.24.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.23.0 | 1.24.0 | - |
Fixed versions
| 1.24.0 |
Sources
- osv: GO-2024-2482
- https://github.com/goreleaser/goreleaser/security/advisories/GHSA-h3q2-8whx-c29h
- https://github.com/goreleaser/goreleaser/commit/d5b6a533ca1dc3366983d5d31ee2d2b6232b83c0
CVE-2024-23840 · published · modified · JSON