{"action":"Upgrade stdlib to 1.21.11 or later.","affected":[{"fixed":"1.21.11","introduced":"0"},{"fixed":"1.22.4","introduced":"1.22.0-0"}],"component":"stdlib","cve_ids":["CVE-2024-24789"],"ecosystem":"Go","epss":0.00443,"exploited":false,"fixed_versions":["1.21.11","1.22.4"],"id":"tcs_01M5KG3A38PNBBRAQ8XXK6X6BZ","modified_at":"2026-03-23T05:00:55.888787393Z","published_at":"2024-06-04T22:48:55Z","references":["https://osv.dev/vulnerability/GO-2024-2888","https://go.dev/cl/585397","https://go.dev/issue/66869","https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2888","url":"https://osv.dev/vulnerability/GO-2024-2888"}],"summary":"Mishandling of corrupt central directory record in archive/zip"}