VDB
GO-2024-2887
GO-2024-2887
PUBLISHED
Record from OSV · Published June 4, 2024
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| argo-workflows | Wolfi | 3.6.5-r2 |
| yq-fips | Chainguard | 4.44.1-r1 |
| crossplane-provider-azure | Wolfi | 1.1.0-r3 |
| ollama | Chainguard | 0.1.41-r1 |
| protoc-gen-go-grpc | Chainguard | 1.4.0-r1 |
| sigstore-scaffolding | Wolfi | 0.7.1-r1 |
| neuvector-dbgen | Chainguard | 0_git20240423-r1 |
| redka | Chainguard | 0.5.0-r1 |
| go-1.21 | Chainguard | 1.21.11-r0 |
| gops | Wolfi | 0.3.28-r11 |
| mage | Chainguard | 1.15.0-r8 |
| ghaudit | Chainguard | 0.4.0-r4 |
88 more packages have a fixed version. See every fix in Lookup.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | argo-workflows | 0 |
| chainguard | yq-fips | 0 |
| wolfi | crossplane-provider-azure | 0 |
| chainguard | ollama | 0 |
| chainguard | protoc-gen-go-grpc | 0 |
| wolfi | sigstore-scaffolding | 0 |
| chainguard | neuvector-dbgen | 0 |
| chainguard | redka | 0 |
| chainguard | go-1.21 | 0 |
| wolfi | gops | 0 |
| chainguard | mage | 0 |
| chainguard | ghaudit | 0 |
| chainguard | smarter-device-manager-fips | 0 |
| chainguard | helm-fips | 0 |
| chainguard | dex | 0 |
| chainguard | helm-4 | 0 |
| chainguard | fulcio-fips | 0 |
| chainguard | thanos-operator-fips | 0 |
| wolfi | jitsucom-bulker | 0 |
| wolfi | sbom-scorecard | 0 |
…and 821 more
Timeline
- Jun 4, 2024 CVE Published
- Mar 23, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GO-2024-2887
vulnetix vdb fixes GO-2024-2887
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GO-2024-2887/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart