{"action":"Upgrade github.com/netbirdio/netbird to 0.29.2 or later.","affected":[{"fixed":"0.29.2","introduced":"0.23.2"}],"component":"github.com/netbirdio/netbird","cve_ids":["CVE-2024-41260"],"ecosystem":"Go","epss":0.00471,"exploited":false,"fixed_versions":["0.29.2"],"ghsa_id":"GHSA-9v35-4xcr-w9ph","id":"tcs_01M5KF65W99EJPDZFEJM57PZTN","modified_at":"2025-12-16T23:34:00.510898Z","published_at":"2024-08-01T18:32:50Z","references":["https://osv.dev/vulnerability/GHSA-9v35-4xcr-w9ph","https://nvd.nist.gov/vuln/detail/CVE-2024-41260","https://github.com/netbirdio/netbird/issues/2246","https://github.com/github/advisory-database/pull/5714","https://github.com/netbirdio/netbird/pull/2569","https://github.com/netbirdio/netbird/commit/cf6210a6f42355e88c422c624376f6fcdaea6729","https://gist.github.com/nyxfqq/92232108ac153e95d538bb17fc5ad636","https://github.com/advisories/GHSA-9v35-4xcr-w9ph","https://github.com/netbirdio/netbird"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9v35-4xcr-w9ph","url":"https://osv.dev/vulnerability/GHSA-9v35-4xcr-w9ph"}],"summary":"NetBird uses a static initialization vector (IV)"}