{"action":"Upgrade github.com/zitadel/zitadel to 0.0.0-20240731122357-a1d24353db4d or later.","affected":[{"fixed":"2.53.9","introduced":"2.53.0"},{"fixed":"2.54.8","introduced":"2.54.0"},{"fixed":"2.55.5","introduced":"2.55.0"},{"fixed":"2.56.2","introduced":"2.56.0"},{"fixed":"2.57.1","introduced":"2.57.0"},{"fixed":"2.58.1","introduced":"2.58.0"},{"fixed":"0.0.0-20240731122357-a1d24353db4d","introduced":"0.0.0-20230609131415-dafa8ab4dfe8"},{"fixed":"1.80.0-v2.20.0.20240731122357-a1d24353db4d","introduced":"1.80.0-v2.20.0.20230609131415-dafa8ab4dfe8"}],"component":"github.com/zitadel/zitadel","cve_ids":["CVE-2024-41952"],"ecosystem":"Go","epss":0.00633,"exploited":false,"fixed_versions":["2.53.9","2.54.8","2.55.5","2.56.2","2.57.1","2.58.1","0.0.0-20240731122357-a1d24353db4d","1.80.0-v2.20.0.20240731122357-a1d24353db4d"],"ghsa_id":"GHSA-567v-6hmg-6qg7","id":"tcs_01M5KEXS4TWJ1HF96SFX4SSA1Q","modified_at":"2025-07-08T16:39:58Z","published_at":"2024-07-31T21:02:52Z","references":["https://osv.dev/vulnerability/GHSA-567v-6hmg-6qg7","https://github.com/zitadel/zitadel/security/advisories/GHSA-567v-6hmg-6qg7","https://nvd.nist.gov/vuln/detail/CVE-2024-41952","https://github.com/zitadel/zitadel/commit/0ab0c645ef914298c343fa39cccb1290aba48bf6","https://github.com/zitadel/zitadel/commit/3c7d12834e32426416235b9e3374be0f4b9380b8","https://github.com/zitadel/zitadel/commit/5c2526c98aafd1ba206be2fa4291b1d24c384f6d","https://github.com/zitadel/zitadel/commit/8565d24fd8df5bd35294313cfbfcc2e15aea20e9","https://github.com/zitadel/zitadel/commit/b0e71a81ef39667ce2a149ce037c1ca0edbe059d","https://github.com/zitadel/zitadel/commit/fc1d415b8db5b8d481bb65206ce3fc944c0eecea","https://github.com/zitadel/zitadel","https://github.com/zitadel/zitadel/releases/tag/v2.53.9","https://github.com/zitadel/zitadel/releases/tag/v2.54.8","https://github.com/zitadel/zitadel/releases/tag/v2.55.5","https://github.com/zitadel/zitadel/releases/tag/v2.56.2","https://github.com/zitadel/zitadel/releases/tag/v2.57.1","https://github.com/zitadel/zitadel/releases/tag/v2.58.1","https://pkg.go.dev/vuln/GO-2024-3014"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-567v-6hmg-6qg7","url":"https://osv.dev/vulnerability/GHSA-567v-6hmg-6qg7"}],"summary":"ZITADEL \"ignoring unknown usernames\" vulnerability"}