{"action":"Upgrade github.com/snapcore/snapd to 0.0.0-20240524114846-68ee9c6aa916 or later.","affected":[{"fixed":"2.63.1","introduced":"2.51.6"},{"introduced":"0"}],"component":"github.com/snapcore/snapd","cve_ids":["CVE-2024-5138"],"ecosystem":"Go","epss":0.00834,"exploited":false,"fixed_versions":["2.63.1","0.0.0-20240524114846-68ee9c6aa916"],"ghsa_id":"GHSA-p9v8-q5m4-pf46","id":"tcs_01M5KFH7CP9BFH2A99B5MQ89RN","modified_at":"2026-07-08T07:14:03.911841367Z","published_at":"2025-01-16T17:19:07Z","references":["https://osv.dev/vulnerability/GHSA-p9v8-q5m4-pf46","https://github.com/canonical/snapd/security/advisories/GHSA-p9v8-q5m4-pf46","https://github.com/canonical/snapd/commit/68ee9c6aa916ab87dbfd9a26030690f2cabf1e14","https://bugs.launchpad.net/snapd/+bug/2065077","https://github.com/canonical/snapd","https://ubuntu.com/security/CVE-2024-5138","https://www.cve.org/CVERecord?id=CVE-2024-5138"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GHSA-p9v8-q5m4-pf46","url":"https://osv.dev/vulnerability/GHSA-p9v8-q5m4-pf46"}],"summary":"CVE-2024-5138: snapd snapctl auth bypass"}