{"action":"Upgrade github.com/grafana/agent to 0.43.3 or later.","affected":[{"fixed":"0.43.3","introduced":"0"}],"component":"github.com/grafana/agent","cve_ids":["CVE-2024-8996"],"ecosystem":"Go","epss":0.00264,"exploited":false,"fixed_versions":["0.43.3"],"ghsa_id":"GHSA-m5gv-m5f9-wgv4","id":"tcs_01M5KFF8G57X6CEWHVCJF9PJMK","modified_at":"2024-10-09T22:12:28Z","published_at":"2024-09-25T18:31:21Z","references":["https://osv.dev/vulnerability/GHSA-m5gv-m5f9-wgv4","https://nvd.nist.gov/vuln/detail/CVE-2024-8996","https://github.com/grafana/agent/commit/91bab2c05906938d3f8e1e3c61a863f037985299","https://github.com/grafana/agent","https://github.com/grafana/agent/releases/tag/v0.43.2","https://github.com/grafana/agent/releases/tag/v0.43.3","https://grafana.com/blog/2024/09/25/grafana-alloy-and-grafana-agent-flow-security-release-high-severity-fix-for-cve-2024-8975-and-cve-2024-8996","https://grafana.com/security/security-advisories/cve-2024-8996","https://pkg.go.dev/vuln/GO-2024-3170"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-m5gv-m5f9-wgv4","url":"https://osv.dev/vulnerability/GHSA-m5gv-m5f9-wgv4"}],"summary":"Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability"}