{"action":"Upgrade github.com/linkerd/linkerd2 to 0.5.1-0.20240614165515-35fb2d6d11ef or later.","affected":[{"fixed":"0.5.1-0.20240614165515-35fb2d6d11ef","introduced":"0"}],"component":"github.com/linkerd/linkerd2","cve_ids":["CVE-2024-40632"],"ecosystem":"Go","epss":0.00444,"exploited":false,"fixed_versions":["0.5.1-0.20240614165515-35fb2d6d11ef"],"ghsa_id":"GHSA-6v94-gj6x-jqj7","id":"tcs_01M5KG4923B17QCAXPSN6R23CT","modified_at":"2025-10-15T11:42:28.655831Z","published_at":"2024-07-22T18:24:29Z","references":["https://osv.dev/vulnerability/GO-2024-2984","https://nvd.nist.gov/vuln/detail/CVE-2024-40632","https://github.com/linkerd/linkerd2/commit/35fb2d6d11ef6520ae516dd717790529f85224fa","https://github.com/linkerd/linkerd2-proxy/blob/46957de49f25fd4661af7b7c52659148f4d6dd27/linkerd/app/admin/src/server.rs","https://github.com/linkerd/linkerd2/security/advisories/GHSA-6v94-gj6x-jqj7"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2984","url":"https://osv.dev/vulnerability/GO-2024-2984"}],"summary":"Linkerd potential access to the shutdown endpoint in github.com/linkerd/linkerd2"}