{"action":"Upgrade github.com/runatlantis/atlantis to 0.19.7 or later.","affected":[{"fixed":"0.19.7","introduced":"0"}],"component":"github.com/runatlantis/atlantis","cve_ids":["CVE-2022-24912"],"ecosystem":"Go","epss":0.01215,"exploited":false,"fixed_versions":["0.19.7"],"ghsa_id":"GHSA-jxqv-jcvh-7gr4","id":"tcs_01M5KFW20FXRYN1CSKAAFZ26MZ","modified_at":"2026-02-04T02:13:50.977488Z","published_at":"2022-08-11T20:54:51Z","references":["https://osv.dev/vulnerability/GO-2022-0534","https://github.com/runatlantis/atlantis/pull/2392","https://github.com/runatlantis/atlantis/commit/48870911974adddaa4c99c8089e79b7d787fa820","https://github.com/runatlantis/atlantis/issues/2391","https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMRUNATLANTISATLANTISSERVERCONTROLLERSEVENTS-2950851"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0534","url":"https://osv.dev/vulnerability/GO-2022-0534"}],"summary":"Timing attack in github.com/runatlantis/atlantis"}