{"schemaVersion":3,"id":"CVE-2023-24531","aliases":["UBUNTU-CVE-2023-24531","DEBIAN-CVE-2023-24531","CGA-22w6-4rg3-rh33","CGA-242m-944m-9mjc","CGA-2727-7246-gx62","CGA-2q36-jfwp-pm86","CGA-2rpp-rxr7-jm3g","CGA-329m-wwrf-v4w2","CGA-3c3c-39mg-236v","CGA-3jwc-8582-6cm9","CGA-3v8x-xr87-2488","CGA-45xf-49p4-xgjm","CGA-46vv-ppv5-32qw","CGA-4cm4-6p4v-gv6x","CGA-4fc2-r53r-qh99","CGA-4j3w-8cpx-xg65","CGA-4qg6-vfc4-fj7c","CGA-52vv-5qv5-q4f2","CGA-5fwg-p2fq-3grf","CGA-5rj3-2x34-pxvx","CGA-5v85-rp33-g534","CGA-6g77-r8gh-4gcv","CGA-6m5q-fq4v-4x52","CGA-6p4f-j8cj-f8vh","CGA-739h-3v89-r79c","CGA-7g4r-983h-jrfr","CGA-82w5-2gfx-4p56","CGA-83rp-24r9-cwq7","CGA-8j6q-q8gc-c9g2","CGA-8wh6-fpr5-mwxr","CGA-8xhm-89mf-cfq9","CGA-968r-mhhm-7p8x","CGA-97mr-vxgh-693w","CGA-99hj-5vpf-8xvp","CGA-9h64-j93w-5g3c","CGA-9vhq-hq67-33gg","CGA-c3p8-qw95-763c","CGA-c58p-xqcv-vmhh","CGA-cfj4-33ph-wrhp","CGA-cg7p-57r3-wc6c","CGA-cq82-mhr9-m6cr","CGA-cxhw-vcx2-jp85","CGA-f8wp-w97f-9wmp","CGA-fgvw-8m6m-q8gp","CGA-fh99-2jvq-mrm6","CGA-fmjw-55r9-v55f","CGA-fwgv-8h2w-mvgm","CGA-hp49-fh95-7462","CGA-j6jm-xm4x-pcm4","CGA-jvrw-836c-hrpf","CGA-mpjj-3rq9-fpmh","CGA-p5fq-q2vc-2cp9","CGA-p7fh-7q4q-w8mr","CGA-q6fh-qp6h-8vvr","CGA-qmh8-g9wq-w59c","CGA-qrxg-v3v8-384g","CGA-qwf6-5ww8-4hxw","CGA-r777-cjm8-3x7j","CGA-r7xx-xjw9-gjvq","CGA-rv77-xf64-3f7r","CGA-v5h3-r5p9-7876","CGA-vm6f-72x2-85mm","CGA-vmj5-rm26-w88f","CGA-wrvg-vprp-3rmr","CGA-ww7c-v66g-wq5c","CGA-xcgq-hmg8-5w6f","CGA-xj2j-qxrf-65x4","CGA-xj4h-fr8h-3pf2","GO-2024-2962","BIT-golang-2023-24531"],"status":"published","duplicateOf":null,"title":null,"description":"Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitize values, so executing its output as a shell script can cause various bad bahaviors, including executing arbitrary commands or inserting new environment variables. This issue is relatively minor because, in general, if an attacker can set arbitrary environment variables on a system, they have better attack vectors than making \"go env\" print them out.","dates":{"published":"2024-07-02T19:51:48.731Z","modified":"2025-03-28T15:02:59.076Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0084,"percentile":0.57196,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.0084},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0084,"percentile":0.57196}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0084,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0084,"percentile":0.57196}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"chainguard","product":"argo-workflows","name":"argo-workflows","label":"argo-workflows","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-workflows","purlType":"apk","versions":[{"text":"< 3.6.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.5-r2","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"argo-workflows","label":"Argo Workflows","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"go-1.20","name":"go-1.20","label":"go-1.20","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/go-1.20","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40 | < 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"newrelic-fluent-bit-output","name":"newrelic-fluent-bit-output","label":"newrelic-fluent-bit-output","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/newrelic-fluent-bit-output","purlType":"apk","versions":[{"text":"< 2.4.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"argo-workflows","name":"argo-workflows","label":"argo-workflows","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/argo-workflows","purlType":"apk","versions":[{"text":"< 3.6.5-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.5-r2","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"argo-workflows","label":"Argo Workflows","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"go-1.20","name":"go-1.20","label":"go-1.20","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/go-1.20","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40 | < 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"newrelic-fluent-bit-output","name":"newrelic-fluent-bit-output","label":"newrelic-fluent-bit-output","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/newrelic-fluent-bit-output","purlType":"apk","versions":[{"text":"< 2.4.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r5","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-1.19","name":"golang-1.19","label":"golang-1.19","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-1.19","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.10","name":"golang-1.10","label":"golang-1.10","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.10","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.13","name":"golang-1.13","label":"golang-1.13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.14","name":"golang-1.14","label":"golang-1.14","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.14","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.16","name":"golang-1.16","label":"golang-1.16","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.16","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.17","name":"golang-1.17","label":"golang-1.17","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.17","purlType":"deb","versions":[{"text":"< 1.17.13-3ubuntu1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.13-3ubuntu1.2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.18","name":"golang-1.18","label":"golang-1.18","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.18","purlType":"deb","versions":[{"text":"< 1.18.1-1ubuntu1~16.04.6+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.18.1-1ubuntu1~18.04.4+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.18.1-1ubuntu1~20.04.3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.18.1-1ubuntu1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.1-1ubuntu1~16.04.6+esm1 | < 1.18.1-1ubuntu1~18.04.4+esm1 | < 1.18.1-1ubuntu1~20.04.3 | < 1.18.1-1ubuntu1.2","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.20","name":"golang-1.20","label":"golang-1.20","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.20","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.21","name":"golang-1.21","label":"golang-1.21","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.21","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.6","name":"golang-1.6","label":"golang-1.6","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.6","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.8","name":"golang-1.8","label":"golang-1.8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.8","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-1.9","name":"golang-1.9","label":"golang-1.9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-1.9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"go toolchain","product":"cmd/go","name":"cmd/go","label":"cmd/go","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.21.0-0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.0-0","eol":null,"hubHref":"/vendor/go_toolchain/cmdgo"},{"vendor":"Go","product":"toolchain","name":"toolchain","label":"toolchain","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/toolchain","purlType":"golang","versions":[{"text":"< 1.21.0-0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.0-0","eol":null,"hubHref":null}],"affectedCount":40,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://go.dev/cl/488375","label":"go.dev/cl/488375","hostname":"go.dev","tags":["REPORT","FIX"]},{"url":"https://go.dev/cl/493535","label":"go.dev/cl/493535","hostname":"go.dev","tags":["REPORT","FIX"]},{"url":"https://go.dev/issue/58508","label":"go.dev/issue/58508","hostname":"go.dev","tags":["REPORT"]},{"url":"https://groups.google.com/g/golang-dev/c/ixHOFpSbajE/m/8EjlbKVWAwAJ","label":"groups.google.com/g/golang-dev/c/ixHOFpSbajE/m/8EjlbKVWAwAJ","hostname":"groups.google.com","tags":["REPORT","WEB"]},{"url":"https://pkg.go.dev/vuln/GO-2024-2962","label":"pkg.go.dev/vuln/GO-2024-2962","hostname":"pkg.go.dev","tags":["REPORT"]},{"url":"https://security.netapp.com/advisory/ntap-20250328-0005/","label":"security.netapp.com/advisory/ntap-20250328-0005/","hostname":"security.netapp.com","tags":[]},{"url":"https://ubuntu.com/security/CVE-2023-24531","label":"ubuntu.com/security/CVE-2023-24531","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24531","label":"www.cve.org/CVERecord?id=CVE-2023-24531","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7061-1","label":"ubuntu.com/security/notices/USN-7061-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7109-1","label":"ubuntu.com/security/notices/USN-7109-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-24531","label":"security-tracker.debian.org/tracker/CVE-2023-24531","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24531","label":"nvd.nist.gov/vuln/detail/CVE-2023-24531","hostname":"nvd.nist.gov","tags":["Oval","Advisory"]}],"lineage":{"upstream":[],"downstream":["USN-7061-1","USN-7109-1"],"duplicates":[],"related":["CGA-CV3J-J2FJ-5792","CGA-JM5G-FWRC-C9R9","USN-7061-1","USN-7109-1"]},"timeline":[{"kind":"published","date":"2024-07-02T19:51:48.731Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-03-28T15:02:59.076Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T08:08:08.580Z","stale":false,"partial":false}}