{"action":"Upgrade github.com/1Panel-dev/1Panel to 1.10.1-lts or later.","affected":[{"fixed":"1.10.1-lts","introduced":"0"}],"component":"github.com/1Panel-dev/1Panel","cve_ids":["CVE-2024-2352"],"ecosystem":"Go","epss":0.03044,"exploited":false,"fixed_versions":["1.10.1-lts"],"ghsa_id":"GHSA-x2vg-5wrf-vj6v","id":"tcs_01M5KG1Y33EWM1Q7EDWHHJ33KY","modified_at":"2026-03-03T04:54:55.139056Z","published_at":"2024-06-04T15:19:21Z","references":["https://osv.dev/vulnerability/GO-2024-2636","https://github.com/advisories/GHSA-x2vg-5wrf-vj6v","https://nvd.nist.gov/vuln/detail/CVE-2024-2352","https://github.com/1Panel-dev/1Panel/pull/4131","https://github.com/1Panel-dev/1Panel/pull/4131#issue-2176105990","https://github.com/1Panel-dev/1Panel/pull/4131/commits/0edd7a9f6f5100aab98a0ea6e5deedff7700396c","https://vuldb.com/?ctiid.256304","https://vuldb.com/?id.256304"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2636","url":"https://osv.dev/vulnerability/GO-2024-2636"}],"summary":"1Panel is vulnerable to command injection in github.com/1Panel-dev/1Panel"}