{"action":"Upgrade github.com/golang/glog to 1.2.4 or later.","affected":[{"fixed":"1.2.4","introduced":"0"}],"component":"github.com/golang/glog","cve_ids":["CVE-2024-45339"],"ecosystem":"Go","epss":0.00318,"exploited":false,"fixed_versions":["1.2.4"],"ghsa_id":"GHSA-6wxm-mpqj-6jpf","id":"tcs_01M5KF0ZTYVBDHZ2YRTMFXBSZG","modified_at":"2026-09-10T03:50:56.272730297Z","published_at":"2025-01-28T17:29:03Z","references":["https://osv.dev/vulnerability/GHSA-6wxm-mpqj-6jpf","https://nvd.nist.gov/vuln/detail/CVE-2024-45339","https://github.com/golang/glog/pull/74","https://github.com/golang/glog/pull/74/commits/b8741656e406e66d6992bc2c9575e460ecaa0ec2","https://github.com/golang/glog","https://groups.google.com/g/golang-announce/c/H-Q4ouHWyKs","https://lists.debian.org/debian-lts-announce/2025/02/msg00019.html","https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File","https://pkg.go.dev/vuln/GO-2025-3372"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-6wxm-mpqj-6jpf","url":"https://osv.dev/vulnerability/GHSA-6wxm-mpqj-6jpf"}],"summary":"Insecure Temporary File usage in github.com/golang/glog"}