{"action":"Upgrade github.com/skupperproject/skupper to 0.0.0-20240703184342-c26bce4079ff or later.","affected":[{"introduced":"0"}],"component":"github.com/skupperproject/skupper","cve_ids":["CVE-2024-6535"],"ecosystem":"Go","epss":0.00528,"exploited":false,"fixed_versions":["0.0.0-20240703184342-c26bce4079ff"],"ghsa_id":"GHSA-w799-v85j-88pg","id":"tcs_01M5KG497BTEJKR2VC383TA0GC","modified_at":"2026-03-03T04:55:34.428134Z","published_at":"2024-07-22T18:24:24Z","references":["https://osv.dev/vulnerability/GO-2024-2987","https://github.com/advisories/GHSA-w799-v85j-88pg","https://nvd.nist.gov/vuln/detail/CVE-2024-6535","https://github.com/skupperproject/skupper/commit/d2cb3782e807853694ee66b6e3d4a1917485eb71","https://access.redhat.com/errata/RHSA-2024:4865","https://access.redhat.com/errata/RHSA-2024:4871","https://access.redhat.com/security/cve/CVE-2024-6535","https://bugzilla.redhat.com/show_bug.cgi?id=2296024"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GO-2024-2987","url":"https://osv.dev/vulnerability/GO-2024-2987"},{"source":"nvd","source_id":"CVE-2024-6535","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6535"}],"summary":"Skupper uses a static cookie secret for the openshift oauth-proxy in github.com/skupperproject/skupper"}