{"action":"Upgrade github.com/0xJacky/Nginx-UI to 1.9.10-0.20240126104956-d70e37c8575e or later.","affected":[{"fixed":"1.9.10-0.20240126104956-d70e37c8575e","introduced":"0"}],"component":"github.com/0xJacky/Nginx-UI","cve_ids":["CVE-2024-23828"],"ecosystem":"Go","epss":0.01054,"exploited":false,"fixed_versions":["1.9.10-0.20240126104956-d70e37c8575e"],"ghsa_id":"GHSA-qcjq-7f7v-pvc8","id":"tcs_01M5KFJW2RK80XDR935N78W4KC","modified_at":"2026-07-06T19:30:10.710611808Z","published_at":"2024-01-29T22:30:24Z","references":["https://osv.dev/vulnerability/GHSA-qcjq-7f7v-pvc8","https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-qcjq-7f7v-pvc8","https://nvd.nist.gov/vuln/detail/CVE-2024-23828","https://github.com/0xJacky/nginx-ui/commit/d70e37c8575e25b3da7203ff06da5e16c77a42d1","https://github.com/0xJacky/nginx-ui","https://pkg.go.dev/vuln/GO-2024-2480"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-qcjq-7f7v-pvc8","url":"https://osv.dev/vulnerability/GHSA-qcjq-7f7v-pvc8"}],"summary":"Nginx-UI vulnerable to authenticated RCE through injecting into the application config via CRLF"}