{"action":"Upgrade github.com/spacemeshos/go-spacemesh to 1.5.2-hotfix1 or later.","affected":[{"fixed":"1.5.2-hotfix1","introduced":"0"}],"component":"github.com/spacemeshos/go-spacemesh","cve_ids":["CVE-2024-34360"],"ecosystem":"Go","epss":0.00734,"exploited":false,"fixed_versions":["1.5.2-hotfix1"],"ghsa_id":"GHSA-jcqq-g64v-gcm7","id":"tcs_01M5KG31XNXMYTZ3R4K84PR9NS","modified_at":"2024-05-20T16:03:47Z","published_at":"2024-05-14T16:33:28Z","references":["https://osv.dev/vulnerability/GO-2024-2831","https://github.com/spacemeshos/go-spacemesh/security/advisories/GHSA-jcqq-g64v-gcm7","https://github.com/spacemeshos/api/commit/1d5bd972bbe225d024c3e0ae5214ddb6b481716e","https://github.com/spacemeshos/go-spacemesh/commit/9aff88d54be809ac43d60e8a8b4d65359c356b87","https://spacemesh.io/blog/spacemesh-white-paper-1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2831#Go/github.com/spacemeshos/go-spacemesh","url":"https://osv.dev/vulnerability/GO-2024-2831"}],"summary":"ATX protocol validation problem in github.com/spacemeshos/go-spacemesh"}