{"action":"Upgrade github.com/cert-manager/cert-manager to 1.12.14 or later.","affected":[{"fixed":"1.12.14","introduced":"0"},{"fixed":"1.15.4","introduced":"1.13.0-alpha.0"},{"fixed":"1.16.2","introduced":"1.16.0-alpha.0"}],"component":"github.com/cert-manager/cert-manager","cve_ids":["CVE-2024-12401"],"ecosystem":"Go","epss":0.00673,"exploited":false,"fixed_versions":["1.12.14","1.15.4","1.16.2"],"ghsa_id":"GHSA-r4pg-vg54-wxx4","id":"tcs_01M5KFM28PXRRE9W0N1FWRGZQ8","modified_at":"2026-09-10T03:50:20.950564072Z","published_at":"2024-11-20T20:48:11Z","references":["https://osv.dev/vulnerability/GHSA-r4pg-vg54-wxx4","https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4","https://github.com/golang/go/issues/50116","https://github.com/cert-manager/cert-manager/pull/7400","https://github.com/cert-manager/cert-manager/pull/7401","https://github.com/cert-manager/cert-manager/pull/7402","https://github.com/cert-manager/cert-manager/pull/7403","https://github.com/cert-manager/cert-manager/commit/3a4c9eb55e2e43570679840bbe3217869fbc8efc","https://github.com/cert-manager/cert-manager/commit/f22f78c8c0a64d718e203b326bc844c488ad7850","https://github.com/cert-manager/cert-manager","https://go.dev/issue/50116","https://pkg.go.dev/vuln/GO-2024-3282"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-r4pg-vg54-wxx4","url":"https://osv.dev/vulnerability/GHSA-r4pg-vg54-wxx4"}],"summary":"cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs"}