{"action":"Upgrade github.com/golang/glog to 1.2.4 or later.","affected":[{"fixed":"1.2.4","introduced":"0"}],"component":"github.com/golang/glog","cve_ids":["CVE-2024-45339"],"ecosystem":"Go","epss":0.00318,"exploited":false,"fixed_versions":["1.2.4"],"ghsa_id":"GHSA-6wxm-mpqj-6jpf","id":"tcs_01M5KG6JS9S2ZAAFGWTNTYERQZ","modified_at":"2026-02-04T04:04:12.085948Z","published_at":"2025-01-28T00:47:30Z","references":["https://osv.dev/vulnerability/GO-2025-3372","https://github.com/golang/glog/pull/74/commits/b8741656e406e66d6992bc2c9575e460ecaa0ec2","https://github.com/golang/glog/pull/74","https://groups.google.com/g/golang-announce/c/H-Q4ouHWyKs","https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2025-3372","url":"https://osv.dev/vulnerability/GO-2025-3372"}],"summary":"Vulnerability when creating log files in github.com/golang/glog"}