onyx --cves cve-2024-24789
CVE-2024-24789
- score
- 4.3
- cvss
- 5.5
- epss
- 0.4%
- published
- 2024-06-05
- kev added
- —
- first seen
The archive/zip package's handling of certain invalid zip files differs from most zip implementations, potentially leading to inconsistent contents depending on the reader. The package now rejects such files.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- First advisory — CERT-FR (avis) Multiples vulnérabilités dans les produits Juniper Networks (15 octobre 2026)
- Tracked by Onyx
Advisories
1 feed this week
Weaknesses
NVD-CWE-noinfo
References 7
- https://go.dev/cl/585397
- https://go.dev/issue/66869
- https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ
- http://www.openwall.com/lists/oss-security/2024/06/04/1
- https://pkg.go.dev/vuln/GO-2024-2888
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5YAEIA6IUHUNGJ7AIXXPQT6D2GYENX7/
- https://security.netapp.com/advisory/ntap-20250131-0008/