{"action":"Upgrade github.com/tiagorlampert/CHAOS to 0.0.0-20220716132853-b47438d36e3a or later.","affected":[{"introduced":"0"}],"component":"github.com/tiagorlampert/CHAOS","cve_ids":["CVE-2024-30850","CVE-2024-33434"],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20220716132853-b47438d36e3a"],"ghsa_id":"GHSA-p3j6-f45h-hw5f","id":"tcs_01M5KFGS2EYZ4J90AGT9J6ZB76","modified_at":"2024-05-09T18:36:35Z","published_at":"2024-04-12T06:33:24Z","references":["https://osv.dev/vulnerability/GHSA-p3j6-f45h-hw5f","https://nvd.nist.gov/vuln/detail/CVE-2024-30850","https://nvd.nist.gov/vuln/detail/CVE-2024-33434","https://github.com/tiagorlampert/CHAOS/pull/95","https://github.com/tiagorlampert/CHAOS/commit/1b451cf62582295b7225caf5a7b506f0bad56f6b","https://github.com/tiagorlampert/CHAOS/commit/24c9e109b5be34df7b2bce8368eae669c481ed5e","https://blog.chebuya.com/posts/remote-code-execution-on-chaos-rat-via-spoofed-agents","https://gist.github.com/slimwang/d1ec6645ba9012a551ea436679244496","https://github.com/tiagorlampert/CHAOS"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-p3j6-f45h-hw5f","url":"https://osv.dev/vulnerability/GHSA-p3j6-f45h-hw5f"}],"summary":"tiagorlampert CHAOS vulnerable to command injections"}