{"action":"Upgrade github.com/juju/juju to 0.0.0-20240829052008-43f0fc59790d or later.","affected":[{"introduced":"0"}],"component":"github.com/juju/juju","cve_ids":["CVE-2024-8038"],"ecosystem":"Go","epss":0.00212,"exploited":false,"fixed_versions":["0.0.0-20240829052008-43f0fc59790d"],"ghsa_id":"GHSA-xwgj-vpm9-q2rq","id":"tcs_01M5KFSX8DW58KYAJ9MNC2GA6G","modified_at":"2024-10-09T22:49:20Z","published_at":"2024-10-03T16:53:26Z","references":["https://osv.dev/vulnerability/GHSA-xwgj-vpm9-q2rq","https://github.com/juju/juju/security/advisories/GHSA-xwgj-vpm9-q2rq","https://nvd.nist.gov/vuln/detail/CVE-2024-8038","https://github.com/juju/juju/commit/43f0fc59790d220a457d4d305f484f62be556d3b","https://github.com/juju/juju","https://github.com/juju/juju/blob/725800953aaa29dbeda4f806097bf838e61644dd/worker/introspection/worker.go#L125","https://pkg.go.dev/vuln/GO-2024-3175"],"severity":{"label":"high","score":7.9},"sources":[{"source":"osv","source_id":"GHSA-xwgj-vpm9-q2rq","url":"https://osv.dev/vulnerability/GHSA-xwgj-vpm9-q2rq"}],"summary":"Vulnerable juju introspection abstract UNIX domain socket"}