{"action":"Upgrade github.com/1Panel-dev/1Panel to 1.10.1-lts or later.","affected":[{"fixed":"1.10.1-lts","introduced":"0"}],"component":"github.com/1Panel-dev/1Panel","cve_ids":["CVE-2024-2352"],"ecosystem":"Go","epss":0.03044,"exploited":false,"fixed_versions":["1.10.1-lts"],"ghsa_id":"GHSA-x2vg-5wrf-vj6v","id":"tcs_01M5KFRE0VBCJHMT4NSB8R641S","modified_at":"2024-06-04T16:56:41.720865Z","published_at":"2024-03-10T03:30:45Z","references":["https://osv.dev/vulnerability/GHSA-x2vg-5wrf-vj6v","https://nvd.nist.gov/vuln/detail/CVE-2024-2352","https://github.com/1Panel-dev/1Panel/pull/4131","https://github.com/1Panel-dev/1Panel/pull/4131#issue-2176105990","https://github.com/1Panel-dev/1Panel/pull/4131/commits/0edd7a9f6f5100aab98a0ea6e5deedff7700396c","https://github.com/1Panel-dev/1Panel","https://vuldb.com/?ctiid.256304","https://vuldb.com/?id.256304"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-x2vg-5wrf-vj6v","url":"https://osv.dev/vulnerability/GHSA-x2vg-5wrf-vj6v"}],"summary":"1Panel is vulnerable to command injection"}