{"action":"Upgrade github.com/stacklok/minder to 0.0.33 or later.","affected":[{"fixed":"0.0.33","introduced":"0"}],"component":"github.com/stacklok/minder","cve_ids":["CVE-2024-27916"],"ecosystem":"Go","epss":0.00666,"exploited":false,"fixed_versions":["0.0.33"],"ghsa_id":"GHSA-v627-69v2-xx37","id":"tcs_01M5KG1TD0VA5HW8EWP4WKE40Y","modified_at":"2024-05-20T16:03:47Z","published_at":"2024-03-11T20:07:44Z","references":["https://osv.dev/vulnerability/GO-2024-2608","https://github.com/stacklok/minder/security/advisories/GHSA-v627-69v2-xx37","https://github.com/stacklok/minder/commit/45750b4e9fb2de33365758366e06c19e999bd2eb"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2608","url":"https://osv.dev/vulnerability/GO-2024-2608"}],"summary":"Minder access control bypass in github.com/stacklok/minder"}