{"action":"Upgrade github.com/appleboy/gorush to 1.18.5 or later.","affected":[{"fixed":"1.18.5","introduced":"0"}],"component":"github.com/appleboy/gorush","cve_ids":["CVE-2024-41270"],"ecosystem":"Go","epss":0.00308,"exploited":false,"fixed_versions":["1.18.5"],"ghsa_id":"GHSA-p3pf-mff8-3h47","id":"tcs_01M5KFGS7YGK9CW2C7YW0PNCDM","modified_at":"2024-08-19T17:58:40.669353Z","published_at":"2024-08-06T21:30:47Z","references":["https://osv.dev/vulnerability/GHSA-p3pf-mff8-3h47","https://nvd.nist.gov/vuln/detail/CVE-2024-41270","https://github.com/appleboy/gorush/issues/792","https://github.com/appleboy/gorush/commit/067cb597e485e40b790a267187bf7f00730b1c4b","https://gist.github.com/nyxfqq/cfae38fada582a0f576d154be1aeb1fc","https://github.com/appleboy/gorush"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-p3pf-mff8-3h47","url":"https://osv.dev/vulnerability/GHSA-p3pf-mff8-3h47"}],"summary":"Gorush uses deprecated TLS versions"}