{"action":"Upgrade github.com/cert-manager/cert-manager to 1.12.14 or later.","affected":[{"fixed":"1.12.14","introduced":"0"},{"fixed":"1.15.4","introduced":"1.13.0-alpha.0"},{"fixed":"1.16.2","introduced":"1.16.0-alpha.0"}],"component":"github.com/cert-manager/cert-manager","cve_ids":["CVE-2024-12401"],"ecosystem":"Go","epss":0.00673,"exploited":false,"fixed_versions":["1.12.14","1.15.4","1.16.2"],"ghsa_id":"GHSA-r4pg-vg54-wxx4","id":"tcs_01M5KG62EM9C3Y7R6G35X1FWJ7","modified_at":"2026-02-04T03:32:41.678655Z","published_at":"2024-11-21T19:52:52Z","references":["https://osv.dev/vulnerability/GO-2024-3282","https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4","https://github.com/cert-manager/cert-manager/commit/3a4c9eb55e2e43570679840bbe3217869fbc8efc","https://github.com/cert-manager/cert-manager/commit/f22f78c8c0a64d718e203b326bc844c488ad7850","https://github.com/cert-manager/cert-manager/pull/7400","https://github.com/cert-manager/cert-manager/pull/7401","https://github.com/cert-manager/cert-manager/pull/7402","https://github.com/cert-manager/cert-manager/pull/7403","https://go.dev/issue/50116"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3282","url":"https://osv.dev/vulnerability/GO-2024-3282"}],"summary":"Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager"}