{"action":"Upgrade github.com/tobychui/zoraxy to 3.1.3 or later.","affected":[{"fixed":"3.1.3","introduced":"2.6.1"}],"component":"github.com/tobychui/zoraxy","cve_ids":["CVE-2024-52010"],"ecosystem":"Go","epss":0.01503,"exploited":false,"fixed_versions":["3.1.3"],"ghsa_id":"GHSA-7hpf-g48v-hw3j","id":"tcs_01M5KF22Q2365ADECA1N5GVYG6","modified_at":"2024-11-19T19:38:19Z","published_at":"2024-11-12T21:28:25Z","references":["https://osv.dev/vulnerability/GHSA-7hpf-g48v-hw3j","https://github.com/tobychui/zoraxy/security/advisories/GHSA-7hpf-g48v-hw3j","https://nvd.nist.gov/vuln/detail/CVE-2024-52010","https://github.com/tobychui/zoraxy/commit/2e9bc77a5d832bff1093058d42ce7a61382e4bc6","https://github.com/tobychui/zoraxy/commit/c07d5f85dfc37bd32819358ed7d4bc32c604e8f0","https://github.com/tobychui/zoraxy","https://pkg.go.dev/vuln/GO-2024-3267"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-7hpf-g48v-hw3j","url":"https://osv.dev/vulnerability/GHSA-7hpf-g48v-hw3j"}],"summary":"Zoraxy has an authenticated command injection in the Web SSH feature"}