{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/coder/coder","cve_ids":["CVE-2024-27918"],"ecosystem":"Go","epss":0.00965,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7cc2-r658-7xpf","id":"tcs_01M5KG1RZFPRD47Q650WGCNQ2G","modified_at":"2024-05-20T16:03:47Z","published_at":"2024-03-11T19:00:01Z","references":["https://osv.dev/vulnerability/GO-2024-2602","https://github.com/coder/coder/security/advisories/GHSA-7cc2-r658-7xpf","https://github.com/coder/coder/commit/1171ce7add017481d28441575024209ac160ecb0","https://github.com/coder/coder/commit/2ba84911f8b02605e5958d5e4a2fe3979ec50b31","https://github.com/coder/coder/commit/2d37eb42e7db656e343fe1f36de5ab1a1a62f4fb","https://github.com/coder/coder/commit/4439a920e454a82565e445e4376c669e3b89591c"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2602","url":"https://osv.dev/vulnerability/GO-2024-2602"}],"summary":"Incorrect email domain verification in github.com/coder/coder"}