{"action":"Upgrade github.com/runatlantis/atlantis to 0.30.0 or later.","affected":[{"fixed":"0.30.0","introduced":"0"}],"component":"github.com/runatlantis/atlantis","cve_ids":["CVE-2024-52009"],"ecosystem":"Go","epss":0.00718,"exploited":false,"fixed_versions":["0.30.0"],"ghsa_id":"GHSA-gppm-hq3p-h4rp","id":"tcs_01M5KG601X4JRZS7YYGWJ8NWJM","modified_at":"2024-12-12T21:58:43Z","published_at":"2024-11-20T17:22:48Z","references":["https://osv.dev/vulnerability/GO-2024-3265","https://github.com/runatlantis/atlantis/security/advisories/GHSA-gppm-hq3p-h4rp","https://github.com/runatlantis/atlantis/commit/0def7d3fb74aabb75570554692b053950cde02e1","https://github.com/runatlantis/atlantis/pull/4667","https://github.com/runatlantis/atlantis/issues/4060","https://argo-cd.readthedocs.io/en/stable/operator-manual/security","https://github.com/runatlantis/atlantis/releases/tag/v0.30.0"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GO-2024-3265","url":"https://osv.dev/vulnerability/GO-2024-3265"},{"source":"nvd","source_id":"CVE-2024-52009","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52009"}],"summary":"Git credentials are exposed in Atlantis logs in github.com/runatlantis/atlantis"}