x/vulndb: potential Go vuln in github.com/1Panel-dev/1Panel: GHSA-x2vg-5wrf-vj6v

[GoVulnBot]

In GitHub Security Advisory GHSA-x2vg-5wrf-vj6v, there is a vulnerability in the following Go packages or modules:

Unit	Fixed	Vulnerable Ranges
github.com/1Panel-dev/1Panel	1.10.1-lts	< 1.10.1-lts

Cross references:

• Module github.com/1Panel-dev/1Panel appears in issue x/vulndb: potential Go vuln in github.com/1Panel-dev/1Panel: CVE-2023-36457 #1887 NOT_IMPORTABLE
• Module github.com/1Panel-dev/1Panel appears in issue x/vulndb: potential Go vuln in github.com/1Panel-dev/1Panel: CVE-2023-36458 #1888 EFFECTIVELY_PRIVATE
• Module github.com/1Panel-dev/1Panel appears in issue x/vulndb: potential Go vuln in github.com/1Panel-dev/1Panel: CVE-2023-37477 #1940 EFFECTIVELY_PRIVATE
• Module github.com/1Panel-dev/1Panel appears in issue x/vulndb: potential Go vuln in github.com/1Panel-dev/1Panel: CVE-2023-39964 #2004 EFFECTIVELY_PRIVATE
• Module github.com/1Panel-dev/1Panel appears in issue x/vulndb: potential Go vuln in github.com/1Panel-dev/1Panel: CVE-2023-39965 #2005 EFFECTIVELY_PRIVATE
• Module github.com/1Panel-dev/1Panel appears in issue x/vulndb: potential Go vuln in github.com/1Panel-dev/1Panel: CVE-2023-39966 #2006 EFFECTIVELY_PRIVATE
• Module github.com/1Panel-dev/1Panel appears in issue x/vulndb: potential Go vuln in github.com/1Panel-dev/1Panel: CVE-2024-24768 #2531 EFFECTIVELY_PRIVATE

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/1Panel-dev/1Panel
      versions:
        - fixed: 1.10.1-lts
      vulnerable_at: 1.10.0-lts
      packages:
        - package: github.com/1Panel-dev/1Panel
summary: 1Panel is vulnerable to command injection
cves:
    - CVE-2024-2352
ghsas:
    - GHSA-x2vg-5wrf-vj6v
references:
    - web: https://nvd.nist.gov/vuln/detail/CVE-2024-2352
    - fix: https://github.com/1Panel-dev/1Panel/pull/4131
    - fix: https://github.com/1Panel-dev/1Panel/pull/4131#issue-2176105990
    - fix: https://github.com/1Panel-dev/1Panel/pull/4131/commits/0edd7a9f6f5100aab98a0ea6e5deedff7700396c
    - web: https://vuldb.com/?ctiid.256304
    - web: https://vuldb.com/?id.256304
    - advisory: https://github.com/advisories/GHSA-x2vg-5wrf-vj6v

[gopherbot]

Change https://go.dev/cl/582358 mentions this issue: data/reports: batch add 11 unreviewed reports

[gopherbot]

Change https://go.dev/cl/586484 mentions this issue: data/reports: add 73 unreviewed reports

[gopherbot]

Change https://go.dev/cl/590039 mentions this issue: data/reports: add 51 reports

[gopherbot]

Change https://go.dev/cl/606358 mentions this issue: data/reports: regenerate 50 reports