{"action":"Upgrade clatter to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"0"}],"component":"clatter","cve_ids":["CVE-2026-24785"],"ecosystem":"crates.io","epss":0.00139,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-253q-9q78-63x4","id":"tcs_01M5KER06KX3TKAQTCX9NTZ74X","modified_at":"2026-02-03T03:06:28.504290Z","published_at":"2026-01-28T16:21:03Z","references":["https://osv.dev/vulnerability/GHSA-253q-9q78-63x4","https://github.com/jmlepisto/clatter/security/advisories/GHSA-253q-9q78-63x4","https://nvd.nist.gov/vuln/detail/CVE-2026-24785","https://github.com/jmlepisto/clatter/commit/b65ae6e9b8019bed5407771e21f89ddff17c5a71","https://github.com/jmlepisto/clatter","https://noiseprotocol.org/noise.html#validity-rule"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-253q-9q78-63x4","url":"https://osv.dev/vulnerability/GHSA-253q-9q78-63x4"},{"source":"nvd","source_id":"CVE-2026-24785","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24785"}],"summary":"Clatter has a PSK Validity Rule Violation issue"}