{"action":"Upgrade stdlib to 1.22.11 or later.","affected":[{"fixed":"1.22.11","introduced":"0"},{"fixed":"1.23.5","introduced":"1.23.0-0"},{"introduced":"1.24.0-0"}],"component":"stdlib","cve_ids":["CVE-2024-45341"],"ecosystem":"Go","epss":0.00568,"exploited":false,"fixed_versions":["1.22.11","1.23.5","1.24.0-rc.2"],"id":"tcs_01M5KG6JXZ93BFST766TNTQ6CE","modified_at":"2026-02-17T16:13:53.362266Z","published_at":"2025-01-28T00:47:30Z","references":["https://osv.dev/vulnerability/GO-2025-3373","https://go.dev/cl/643099","https://go.dev/issue/71156","https://groups.google.com/g/golang-dev/c/bG8cv1muIBM/m/G461hA6lCgAJ","https://groups.google.com/g/golang-dev/c/CAWXhan3Jww/m/bk9LAa-lCgAJ"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2025-3373","url":"https://osv.dev/vulnerability/GO-2025-3373"}],"summary":"Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509"}