{"action":"Upgrade github.com/spacemeshos/go-spacemesh to 1.5.2-hotfix1 or later.","affected":[{"fixed":"1.5.2-hotfix1","introduced":"0"}],"component":"github.com/spacemeshos/go-spacemesh","cve_ids":["CVE-2024-34360"],"ecosystem":"Go","epss":0.00734,"exploited":false,"fixed_versions":["1.5.2-hotfix1"],"ghsa_id":"GHSA-jcqq-g64v-gcm7","id":"tcs_01M5KFE013AJF8FMYGRVD4839S","modified_at":"2026-09-10T03:49:18.839972704Z","published_at":"2024-05-10T15:33:40Z","references":["https://osv.dev/vulnerability/GHSA-jcqq-g64v-gcm7","https://github.com/spacemeshos/go-spacemesh/security/advisories/GHSA-jcqq-g64v-gcm7","https://nvd.nist.gov/vuln/detail/CVE-2024-34360","https://github.com/spacemeshos/api/commit/1d5bd972bbe225d024c3e0ae5214ddb6b481716e","https://github.com/spacemeshos/go-spacemesh/commit/9aff88d54be809ac43d60e8a8b4d65359c356b87","https://github.com/spacemeshos/go-spacemesh","https://pkg.go.dev/vuln/GO-2024-2831","https://spacemesh.io/blog/spacemesh-white-paper-1"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-jcqq-g64v-gcm7","url":"https://osv.dev/vulnerability/GHSA-jcqq-g64v-gcm7"}],"summary":"Previous ATX is not checked to be the newest valid ATX by Smesher when validating incoming ATX"}