{"action":"Upgrade github.com/bishopfox/sliver to 1.6.0 or later.","affected":[{"fixed":"1.6.0","introduced":"1.5.40"}],"component":"github.com/bishopfox/sliver","cve_ids":["CVE-2024-41111"],"ecosystem":"Go","epss":0.0071,"exploited":false,"fixed_versions":["1.6.0"],"ghsa_id":"GHSA-hc5w-gxxr-w8x8","id":"tcs_01M5KFC9X0HSC5MRS73CH74DN1","modified_at":"2026-09-10T03:50:16.751045307Z","published_at":"2024-07-18T20:23:24Z","references":["https://osv.dev/vulnerability/GHSA-hc5w-gxxr-w8x8","https://github.com/BishopFox/sliver/security/advisories/GHSA-hc5w-gxxr-w8x8","https://nvd.nist.gov/vuln/detail/CVE-2024-41111","https://github.com/BishopFox/sliver/issues/65","https://github.com/BishopFox/sliver/pull/1281","https://github.com/BishopFox/sliver/commit/0deaee625d14c6f05f63c86e5c3b7ae623a1138f","https://github.com/BishopFox/sliver/commit/5016fb8d7cdff38c79e22e8293e58300f8d3bd57","https://github.com/BishopFox/sliver/commit/d8ff64222dc69d931197d0bbae3fba11dbe17533","https://github.com/BishopFox/sliver","https://sliver.sh/docs?name=Multi-player+Mode"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-hc5w-gxxr-w8x8","url":"https://osv.dev/vulnerability/GHSA-hc5w-gxxr-w8x8"}],"summary":"Sliver Allows Authenticated Operator-to-Server Remote Code Execution"}