{"action":"Upgrade toolchain to 1.21.0-0 or later.","affected":[{"fixed":"1.21.0-0","introduced":"0"}],"component":"toolchain","cve_ids":["CVE-2023-24531"],"ecosystem":"Go","epss":0.0084,"exploited":false,"fixed_versions":["1.21.0-0"],"id":"tcs_01M5KG429Q9XV4YD6HC14YZ8RQ","modified_at":"2026-02-04T03:51:26.716092Z","published_at":"2024-07-02T19:27:52Z","references":["https://osv.dev/vulnerability/GO-2024-2962","https://go.dev/cl/488375","https://go.dev/cl/493535","https://go.dev/issue/58508","https://groups.google.com/g/golang-dev/c/ixHOFpSbajE/m/8EjlbKVWAwAJ"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2962","url":"https://osv.dev/vulnerability/GO-2024-2962"}],"summary":"Output of \"go env\" does not sanitize values in cmd/go"}