{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/mholt/archiver/v3","cve_ids":["CVE-2024-0406"],"ecosystem":"Go","epss":0.00928,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rhh4-rh7c-7r5v","id":"tcs_01M5KG28H1ZQ9BXPSFVZYW29KG","modified_at":"2026-02-04T02:36:31.364364Z","published_at":"2024-06-05T15:10:52Z","references":["https://osv.dev/vulnerability/GO-2024-2698","https://github.com/advisories/GHSA-rhh4-rh7c-7r5v","https://access.redhat.com/security/cve/CVE-2024-0406","https://bugzilla.redhat.com/show_bug.cgi?id=2257749"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2698#Go/github.com/mholt/archiver/v3","url":"https://osv.dev/vulnerability/GO-2024-2698"}],"summary":"Archiver Path Traversal vulnerability in github.com/mholt/archiver"}