{"action":"Upgrade github.com/ubuntu/authd to 0.0.0-20240930103526-63e527496b01 or later.","affected":[{"introduced":"0"},{"fixed":"0.3.5","introduced":"0.1.0"}],"component":"github.com/ubuntu/authd","cve_ids":["CVE-2024-9313"],"ecosystem":"Go","epss":0.00581,"exploited":false,"fixed_versions":["0.0.0-20240930103526-63e527496b01","0.3.5"],"ghsa_id":"GHSA-x5q3-c8rm-w787","id":"tcs_01M5KFRKYKMF92EC0T24MG5YVF","modified_at":"2025-01-21T17:19:31Z","published_at":"2024-10-03T16:53:07Z","references":["https://osv.dev/vulnerability/GHSA-x5q3-c8rm-w787","https://github.com/ubuntu/authd/security/advisories/GHSA-x5q3-c8rm-w787","https://nvd.nist.gov/vuln/detail/CVE-2024-9313","https://github.com/ubuntu/authd/commit/63e527496b013bed46904c1c58be593c13ebdce5","https://github.com/ubuntu/authd","https://pkg.go.dev/vuln/GO-2024-3181","https://www.cve.org/CVERecord?id=CVE-2024-9313"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-x5q3-c8rm-w787","url":"https://osv.dev/vulnerability/GHSA-x5q3-c8rm-w787"}],"summary":"PAM module may allow accessing with the credentials of another user"}