CVE-2024-6984

3 advisories.

Go/github.com/juju/juju CVE-2024-6984: high 8.8, EPSS 0.38%

Juju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm

Action: Upgrade github.com/juju/juju to 2.9.50 or later.

go get github.com/juju/juju@v2.9.50

go get github.com/juju/juju@v3.1.9

go get github.com/juju/juju@v3.3.6

go get github.com/juju/juju@v3.4.5

go get github.com/juju/juju@v3.5.3

2.9.50

3.1.9

3.3.6

3.4.5

3.5.3

CVE-2024-6984 · published 2024-08-05T17:19:11Z · modified 2026-07-08T06:52:56.454258198Z · JSON

CVE-2024-6984 in github.com/juju/juju

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0	-	-

No fixed version in the source.

CVE-2024-6984 · published 2024-08-06T22:03:16Z · modified 2026-07-08T06:49:29.019572311Z · JSON

Juju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm in github.com/juju/juju

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0	-	-

No fixed version in the source.

CVE-2024-6984 · published 2024-08-06T22:03:16Z · modified 2026-07-08T06:49:29.019572311Z · JSON