{"action":"Upgrade golang.org/x/image to 0.18.0 or later.","affected":[{"fixed":"0.18.0","introduced":"0"}],"component":"golang.org/x/image","cve_ids":["CVE-2024-24792"],"ecosystem":"Go","epss":0.00731,"exploited":false,"fixed_versions":["0.18.0"],"ghsa_id":"GHSA-9phm-fm57-rhg8","id":"tcs_01M5KG3ZGQB6055Q3M6F0JZ8W7","modified_at":"2026-02-04T03:54:25.251608Z","published_at":"2024-06-25T22:06:09Z","references":["https://osv.dev/vulnerability/GO-2024-2937","https://go.dev/cl/588115","https://go.dev/issue/67624"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2937","url":"https://osv.dev/vulnerability/GO-2024-2937"}],"summary":"Panic when parsing invalid palette-color images in golang.org/x/image"}