{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/mattermost/mattermost-plugin-jira","cve_ids":["CVE-2024-24774"],"ecosystem":"Go","epss":0.00456,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-qr8f-cjw7-838m","id":"tcs_01M5KG1CJXHJAVAJ6XQFA45K2T","modified_at":"2024-07-09T19:33:56Z","published_at":"2024-06-28T15:28:53Z","references":["https://osv.dev/vulnerability/GO-2024-2540","https://github.com/advisories/GHSA-qr8f-cjw7-838m","https://nvd.nist.gov/vuln/detail/CVE-2024-24774","https://github.com/mattermost/mattermost-plugin-jira/commit/5f5e084d169bf6b82d5c46a7a7eb033e1a01c6de","https://mattermost.com/security-updates"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2540","url":"https://osv.dev/vulnerability/GO-2024-2540"}],"summary":"Mattermost Jira Plugin does not properly check security levels in github.com/mattermost/mattermost-plugin-jira"}