{"action":"Upgrade github.com/goreleaser/goreleaser to 1.26.1 or later.","affected":[{"fixed":"1.26.1","introduced":"1.26.0"}],"component":"github.com/goreleaser/goreleaser","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.26.1"],"ghsa_id":"GHSA-f6mm-5fc7-3g3c","id":"tcs_01M5KG35GZS4B8N34XVYFRS2YV","modified_at":"2026-02-04T03:44:32.815450Z","published_at":"2024-06-04T15:19:21Z","references":["https://osv.dev/vulnerability/GO-2024-2860","https://github.com/goreleaser/goreleaser/security/advisories/GHSA-f6mm-5fc7-3g3c","https://github.com/goreleaser/goreleaser/commit/22f734e41f7a5111a031a3a4eb714c1b6aa6456b","https://github.com/goreleaser/goreleaser/pull/4787"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2860","url":"https://osv.dev/vulnerability/GO-2024-2860"}],"summary":"goreleaser shows environment by default in github.com/goreleaser/goreleaser"}