{"action":"Upgrade filippo.io/age to 1.2.1 or later.","affected":[{"fixed":"1.2.1","introduced":"0"}],"component":"filippo.io/age","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["1.2.1"],"ghsa_id":"GHSA-32gq-x56h-299c","id":"tcs_01M5KG6EYBCTVNYNGZFXE85HS1","modified_at":"2026-02-04T04:00:26.433286Z","published_at":"2024-12-20T20:36:46Z","references":["https://osv.dev/vulnerability/GO-2024-3344","https://github.com/FiloSottile/age/security/advisories/GHSA-32gq-x56h-299c","https://github.com/FiloSottile/age/commit/482cf6fc9babd3ab06f6606762aac10447222201"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-3344","url":"https://osv.dev/vulnerability/GO-2024-3344"}],"summary":"Malicious plugin names, recipients, or identities causing arbitrary binary execution in filippo.io/age"}