CVE-2024-24757

9.8 criticalEPSS 0.5%

Critical (9.8) in degamisu open-irs. EPSS 0.5% chance of exploitation in the next 30 days.

open-irs is an issue response robot that reponds to issues in the installed repository. The `.env` file was accidentally uploaded when working with git actions. This problem is fixed in 1.0.1. Discontinuing all sensitive keys and turning into secrets.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2024-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

degamisu:open-irs

References

https://github.com/Degamisu/open-irs/security/advisories/GHSA-7r69-3vwh-wcfr
https://github.com/Degamisu/open-irs/security/advisories/GHSA-7r69-3vwh-wcfr

Check your stack JSON