{"action":"Upgrade github.com/hashicorp/vault to 1.15.12 or later.","affected":[{"fixed":"1.15.12","introduced":"1.10.0"},{"fixed":"1.16.3","introduced":"1.16.0-rc1"},{"fixed":"1.17.2","introduced":"1.17.0-rc1"}],"component":"github.com/hashicorp/vault","cve_ids":["CVE-2024-6468"],"ecosystem":"Go","epss":0.00491,"exploited":false,"fixed_versions":["1.15.12","1.16.3","1.17.2"],"ghsa_id":"GHSA-2qmw-pvf7-4mw6","id":"tcs_01M5KESJVGDFAZQSMXCM8XA4QF","modified_at":"2026-09-10T03:50:16.153292263Z","published_at":"2024-07-11T21:31:13Z","references":["https://osv.dev/vulnerability/GHSA-2qmw-pvf7-4mw6","https://nvd.nist.gov/vuln/detail/CVE-2024-6468","https://discuss.hashicorp.com/t/hcsec-2024-14-vault-vulnerable-to-denial-of-service-when-setting-a-proxy-protocol-behavior/68518","https://github.com/advisories/GHSA-2qmw-pvf7-4mw6","https://github.com/hashicorp/vault"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2qmw-pvf7-4mw6","url":"https://osv.dev/vulnerability/GHSA-2qmw-pvf7-4mw6"}],"summary":"Hashicorp Vault vulnerable to Improper Check or Handling of Exceptional Conditions"}