{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/zitadel/zitadel","cve_ids":["CVE-2024-41952"],"ecosystem":"Go","epss":0.00633,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-567v-6hmg-6qg7","id":"tcs_01M5KG4EQ4H0GCJ6MES2PHCJPK","modified_at":"2024-08-06T22:27:07.255358Z","published_at":"2024-08-06T22:03:16Z","references":["https://osv.dev/vulnerability/GO-2024-3014","https://github.com/zitadel/zitadel/security/advisories/GHSA-567v-6hmg-6qg7","https://nvd.nist.gov/vuln/detail/CVE-2024-41952","https://github.com/zitadel/zitadel/commit/0ab0c645ef914298c343fa39cccb1290aba48bf6","https://github.com/zitadel/zitadel/commit/3c7d12834e32426416235b9e3374be0f4b9380b8","https://github.com/zitadel/zitadel/commit/5c2526c98aafd1ba206be2fa4291b1d24c384f6d","https://github.com/zitadel/zitadel/commit/8565d24fd8df5bd35294313cfbfcc2e15aea20e9","https://github.com/zitadel/zitadel/commit/b0e71a81ef39667ce2a149ce037c1ca0edbe059d","https://github.com/zitadel/zitadel/commit/fc1d415b8db5b8d481bb65206ce3fc944c0eecea","https://github.com/zitadel/zitadel/releases/tag/v2.53.9","https://github.com/zitadel/zitadel/releases/tag/v2.54.8","https://github.com/zitadel/zitadel/releases/tag/v2.55.5","https://github.com/zitadel/zitadel/releases/tag/v2.56.2","https://github.com/zitadel/zitadel/releases/tag/v2.57.1","https://github.com/zitadel/zitadel/releases/tag/v2.58.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3014","url":"https://osv.dev/vulnerability/GO-2024-3014"}],"summary":"ZITADEL \"ignoring unknown usernames\" vulnerability in github.com/zitadel/zitadel"}