{"action":"Upgrade github.com/btcsuite/btcd to 0.24.2-beta.rc1 or later.","affected":[{"fixed":"0.24.2-beta.rc1","introduced":"0"}],"component":"github.com/btcsuite/btcd","cve_ids":["CVE-2024-38365"],"ecosystem":"Go","epss":0.01007,"exploited":false,"fixed_versions":["0.24.2-beta.rc1"],"ghsa_id":"GHSA-27vh-h6mc-q6g8","id":"tcs_01M5KERR576EBC8QJC4QVD00K0","modified_at":"2025-08-21T04:05:13Z","published_at":"2024-10-10T16:43:17Z","references":["https://osv.dev/vulnerability/GHSA-27vh-h6mc-q6g8","https://github.com/btcsuite/btcd/security/advisories/GHSA-27vh-h6mc-q6g8","https://nvd.nist.gov/vuln/detail/CVE-2024-38365","https://github.com/btcsuite/btcd/commit/04469e600e7d4a58881e2e5447d19024e49800f5","https://delvingbitcoin.org/t/cve-2024-38365-public-disclosure-btcd-findanddelete-bug/1184","https://github.com/btcsuite/btcd","https://github.com/btcsuite/btcd/releases/tag/v0.24.2"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-27vh-h6mc-q6g8","url":"https://osv.dev/vulnerability/GHSA-27vh-h6mc-q6g8"}],"summary":"btcd did not correctly re-implement Bitcoin Core's \"FindAndDelete()\" functionality"}