{"action":"Upgrade stdlib to 1.21.11 or later.","affected":[{"fixed":"1.21.11","introduced":"0"},{"fixed":"1.22.4","introduced":"1.22.0-0"}],"component":"stdlib","cve_ids":["CVE-2024-24790"],"ecosystem":"Go","epss":0.01952,"exploited":false,"fixed_versions":["1.21.11","1.22.4"],"id":"tcs_01M5KG39YBFNEGM3A96YJVECHZ","modified_at":"2026-03-23T05:07:22.471505044Z","published_at":"2024-06-04T22:48:55Z","references":["https://osv.dev/vulnerability/GO-2024-2887","https://go.dev/cl/590316","https://go.dev/issue/67680","https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2887","url":"https://osv.dev/vulnerability/GO-2024-2887"}],"summary":"Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip"}