{"action":"Upgrade github.com/minio/minio to 0.0.0-20240131185645-0ae4915a9391 or later.","affected":[{"introduced":"0"}],"component":"github.com/minio/minio","cve_ids":["CVE-2024-24747"],"ecosystem":"Go","epss":0.34086,"exploited":false,"fixed_versions":["0.0.0-20240131185645-0ae4915a9391"],"ghsa_id":"GHSA-xx8w-mq23-29g4","id":"tcs_01M5KFSZMDJ03X906JFXC9WC4D","modified_at":"2026-10-08T08:11:01.109901140Z","published_at":"2024-02-01T19:21:30Z","references":["https://osv.dev/vulnerability/GHSA-xx8w-mq23-29g4","https://github.com/minio/minio/security/advisories/GHSA-xx8w-mq23-29g4","https://nvd.nist.gov/vuln/detail/CVE-2024-24747","https://github.com/minio/minio/commit/0ae4915a9391ef4b3ec80f5fcdcf24ee6884e776","https://github.com/minio/minio","https://github.com/minio/minio/releases/tag/RELEASE.2024-01-31T20-20-33Z"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-xx8w-mq23-29g4","url":"https://osv.dev/vulnerability/GHSA-xx8w-mq23-29g4"}],"summary":"Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation"}