{"action":"Upgrade github.com/runatlantis/atlantis to 0.30.0 or later.","affected":[{"fixed":"0.30.0","introduced":"0"}],"component":"github.com/runatlantis/atlantis","cve_ids":["CVE-2024-52009"],"ecosystem":"Go","epss":0.00718,"exploited":false,"fixed_versions":["0.30.0"],"ghsa_id":"GHSA-gppm-hq3p-h4rp","id":"tcs_01M5KFB7PN2RD0K3513KVY8D8K","modified_at":"2026-06-26T19:45:10.510158251Z","published_at":"2024-11-08T19:03:35Z","references":["https://osv.dev/vulnerability/GHSA-gppm-hq3p-h4rp","https://github.com/runatlantis/atlantis/security/advisories/GHSA-gppm-hq3p-h4rp","https://nvd.nist.gov/vuln/detail/CVE-2024-52009","https://github.com/runatlantis/atlantis/issues/4060","https://github.com/runatlantis/atlantis/pull/4667","https://github.com/runatlantis/atlantis/commit/0def7d3fb74aabb75570554692b053950cde02e1","https://argo-cd.readthedocs.io/en/stable/operator-manual/security","https://github.com/runatlantis/atlantis","https://github.com/runatlantis/atlantis/releases/tag/v0.30.0","https://pkg.go.dev/vuln/GO-2024-3265"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gppm-hq3p-h4rp","url":"https://osv.dev/vulnerability/GHSA-gppm-hq3p-h4rp"},{"source":"nvd","source_id":"CVE-2024-52009","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52009"}],"summary":"Git credentials are exposed in Atlantis logs"}