{"action":"Upgrade github.com/appleboy/gorush to 1.18.5 or later.","affected":[{"fixed":"1.18.5","introduced":"0"}],"component":"github.com/appleboy/gorush","cve_ids":["CVE-2024-41270"],"ecosystem":"Go","epss":0.00308,"exploited":false,"fixed_versions":["1.18.5"],"ghsa_id":"GHSA-p3pf-mff8-3h47","id":"tcs_01M5KG4V51D26RRSQ3F8PKPJKZ","modified_at":"2024-08-19T17:58:40.669353Z","published_at":"2024-08-19T17:26:34Z","references":["https://osv.dev/vulnerability/GO-2024-3058","https://github.com/advisories/GHSA-p3pf-mff8-3h47","https://github.com/appleboy/gorush/commit/067cb597e485e40b790a267187bf7f00730b1c4b","https://github.com/appleboy/gorush/issues/792","https://gist.github.com/nyxfqq/cfae38fada582a0f576d154be1aeb1fc"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3058","url":"https://osv.dev/vulnerability/GO-2024-3058"}],"summary":"Gorush uses deprecated TLS versions in github.com/appleboy/gorush"}