{"action":"Upgrade github.com/tiagorlampert/CHAOS to 0.0.0-20220716132853-b47438d36e3a or later.","affected":[{"introduced":"0"}],"component":"github.com/tiagorlampert/CHAOS","cve_ids":["CVE-2024-30850","CVE-2024-33434"],"ecosystem":"Go","exploited":false,"fixed_versions":["0.0.0-20220716132853-b47438d36e3a"],"ghsa_id":"GHSA-xfjj-f699-rc79","id":"tcs_01M5KFS2A6PDFVWQE8J0A9520E","modified_at":"2026-04-06T23:18:42.166521Z","published_at":"2024-05-07T15:30:37Z","references":["https://osv.dev/vulnerability/GHSA-xfjj-f699-rc79","https://nvd.nist.gov/vuln/detail/CVE-2024-33434","https://github.com/tiagorlampert/CHAOS/pull/95","https://github.com/tiagorlampert/CHAOS/commit/1b451cf62582295b7225caf5a7b506f0bad56f6b","https://github.com/tiagorlampert/CHAOS/commit/24c9e109b5be34df7b2bce8368eae669c481ed5e","https://github.com/tiagorlampert/CHAOS/commit/b47438d36e3ad746de8c009e644f6e5396703f25","https://gist.github.com/slimwang/d1ec6645ba9012a551ea436679244496","https://github.com/tiagorlampert/CHAOS","https://web.archive.org/web/20240406061035/https://blog.chebuya.com/posts/remote-code-execution-on-chaos-rat-via-spoofed-agents"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xfjj-f699-rc79","url":"https://osv.dev/vulnerability/GHSA-xfjj-f699-rc79"}],"summary":"tiagorlampert CHAOS vulnerable to arbitrary code execution"}