{"action":"Upgrade dante to 1.4.4-r0 or later.","affected":[{"fixed":"1.4.4-r0","introduced":"0"}],"component":"dante","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.22","exploited":false,"fixed_versions":["1.4.4-r0"],"id":"tcs_01M6H0KG3B45MCEG8DNXCVDRFV","modified_at":"2026-11-03T06:32:50.292600415Z","published_at":"2024-12-17T18:15:24.963Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2024-54662","https://security.alpinelinux.org/vuln/CVE-2024-54662"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2024-54662","url":"https://osv.dev/vulnerability/ALPINE-CVE-2024-54662"}],"summary":"Dante 1.4.0 through 1.4.3 (fixed in 1.4.4) has incorrect access control for some sockd.conf configurations involving socksmethod."}