{"action":"Upgrade github.com/mattermost/mattermost-plugin-jira to 4.0.0-rc1 or later.","affected":[{"fixed":"4.0.0-rc1","introduced":"0"}],"component":"github.com/mattermost/mattermost-plugin-jira","cve_ids":["CVE-2024-24774"],"ecosystem":"Go","epss":0.00456,"exploited":false,"fixed_versions":["4.0.0-rc1"],"ghsa_id":"GHSA-qr8f-cjw7-838m","id":"tcs_01M5KFKFYFHBVECAW05HCWPF99","modified_at":"2024-11-18T16:26:36Z","published_at":"2024-02-09T15:31:27Z","references":["https://osv.dev/vulnerability/GHSA-qr8f-cjw7-838m","https://nvd.nist.gov/vuln/detail/CVE-2024-24774","https://github.com/mattermost/mattermost-plugin-jira/commit/5f5e084d169bf6b82d5c46a7a7eb033e1a01c6de","https://mattermost.com/security-updates"],"severity":{"label":"low","score":3.4},"sources":[{"source":"osv","source_id":"GHSA-qr8f-cjw7-838m","url":"https://osv.dev/vulnerability/GHSA-qr8f-cjw7-838m"}],"summary":"Mattermost Jira Plugin does not properly check security levels"}