{"action":"Upgrade spin-sdk to 2.4.3 or later.","affected":[{"fixed":"2.4.3","introduced":"0"}],"component":"spin-sdk","cve_ids":["CVE-2024-32980"],"ecosystem":"crates.io","epss":0.00489,"exploited":false,"fixed_versions":["2.4.3"],"ghsa_id":"GHSA-f3h7-gpjj-wcvh","id":"tcs_01M5KEX5DM511J23E2A29XBA35","modified_at":"2026-09-10T03:50:00.349110315Z","published_at":"2024-05-08T17:50:49Z","references":["https://osv.dev/vulnerability/GHSA-f3h7-gpjj-wcvh","https://github.com/fermyon/spin/security/advisories/GHSA-f3h7-gpjj-wcvh","https://nvd.nist.gov/vuln/detail/CVE-2024-32980","https://github.com/fermyon/spin/commit/b3db535c9edb72278d4db3a201f0ed214e561354","https://github.com/fermyon/spin"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-f3h7-gpjj-wcvh","url":"https://osv.dev/vulnerability/GHSA-f3h7-gpjj-wcvh"}],"summary":"Spin applications with specific configuration vulnerable to potential network sandbox escape"}