{"action":"Upgrade github.com/runatlantis/atlantis to 0.19.7 or later.","affected":[{"fixed":"0.19.7","introduced":"0"}],"component":"github.com/runatlantis/atlantis","cve_ids":["CVE-2022-24912"],"ecosystem":"Go","epss":0.01215,"exploited":false,"fixed_versions":["0.19.7"],"ghsa_id":"GHSA-jxqv-jcvh-7gr4","id":"tcs_01M5KFEYBT1MQ6BTQRCAZ15F9N","modified_at":"2026-09-10T03:50:06.965740708Z","published_at":"2022-07-30T00:00:41Z","references":["https://osv.dev/vulnerability/GHSA-jxqv-jcvh-7gr4","https://nvd.nist.gov/vuln/detail/CVE-2022-24912","https://github.com/runatlantis/atlantis/issues/2391","https://github.com/runatlantis/atlantis/pull/2392","https://github.com/runatlantis/atlantis/commit/48870911974adddaa4c99c8089e79b7d787fa820","https://github.com/runatlantis/atlantis","https://pkg.go.dev/vuln/GO-2022-0534","https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMRUNATLANTISATLANTISSERVERCONTROLLERSEVENTS-2950851"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jxqv-jcvh-7gr4","url":"https://osv.dev/vulnerability/GHSA-jxqv-jcvh-7gr4"}],"summary":"Atlantis Events vulnerable to Timing Attack"}