{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"1.5.40"}],"component":"github.com/bishopfox/sliver","cve_ids":["CVE-2024-41111"],"ecosystem":"Go","epss":0.0071,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hc5w-gxxr-w8x8","id":"tcs_01M5KG4A6AYB695RWZ9F03XBTG","modified_at":"2024-08-19T17:26:30Z","published_at":"2024-07-22T18:24:38Z","references":["https://osv.dev/vulnerability/GO-2024-2993","https://github.com/BishopFox/sliver/security/advisories/GHSA-hc5w-gxxr-w8x8","https://nvd.nist.gov/vuln/detail/CVE-2024-41111","https://github.com/BishopFox/sliver/commit/0deaee625d14c6f05f63c86e5c3b7ae623a1138f","https://github.com/BishopFox/sliver/commit/5016fb8d7cdff38c79e22e8293e58300f8d3bd57","https://github.com/BishopFox/sliver/commit/d8ff64222dc69d931197d0bbae3fba11dbe17533","https://github.com/BishopFox/sliver/issues/65","https://github.com/BishopFox/sliver/pull/1281","https://sliver.sh/docs?name=Multi-player+Mode"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2993","url":"https://osv.dev/vulnerability/GO-2024-2993"}],"summary":"Sliver Allows Authenticated Operator-to-Server Remote Code Execution in github.com/bishopfox/sliver"}