{"action":"Upgrade github.com/skupperproject/skupper to 0.0.0-20240703184342-c26bce4079ff or later.","affected":[{"introduced":"0"}],"component":"github.com/skupperproject/skupper","cve_ids":["CVE-2024-6535"],"ecosystem":"Go","epss":0.00528,"exploited":false,"fixed_versions":["0.0.0-20240703184342-c26bce4079ff"],"ghsa_id":"GHSA-w799-v85j-88pg","id":"tcs_01M5KFQCKY0BM6EKX0DKZMPHJH","modified_at":"2024-11-18T16:26:52Z","published_at":"2024-07-17T03:31:38Z","references":["https://osv.dev/vulnerability/GHSA-w799-v85j-88pg","https://nvd.nist.gov/vuln/detail/CVE-2024-6535","https://github.com/skupperproject/skupper/commit/d2cb3782e807853694ee66b6e3d4a1917485eb71","https://access.redhat.com/errata/RHSA-2024:4865","https://access.redhat.com/errata/RHSA-2024:4871","https://access.redhat.com/security/cve/CVE-2024-6535","https://bugzilla.redhat.com/show_bug.cgi?id=2296024","https://github.com/skupperproject/skupper"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-w799-v85j-88pg","url":"https://osv.dev/vulnerability/GHSA-w799-v85j-88pg"}],"summary":"Skupper uses a static cookie secret for the openshift oauth-proxy"}